Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Lesley
Mentor Mentor
Mentor

Let's discuss: Important Notification to Customers with SecureXL User Mode (UPPAK) enabled, on R81.2

We have received the following message today, I assume more people did. Let's discuss this topic. 

Anyone experienced this issue yet? I have some setups running this take but have not seen this issue. 

I see SK already has been updated with more information so that is good. I assume that the fix will be included in upcoming takes? And with a crash, gateway does full reboot? Or some processes are restarting and there is a ''hickup''? 

We would like to bring the following to your immediate attention. We have identified that configuration of your environment with SecureXL User Mode (UPPAK) enabled on your Security Gateway may have compatibility issues with Take 96 / Take 98.

Action required :
Please follow sk183181 for remediation steps.

Symptoms

  • Security Gateway with the R81.20 Jumbo Hotfix Accumulator Takes 96 and Take 98 may crash frequently when SecureXL works in the User Mode (UPPAK).

Cause

Race condition may occur in the ADP acceleration driver when updating network routes for SecureXL in the User Mode (UPPAK):

  • In Take 96, the process "usim_x86" crashes with a core dump file in the /var/log/dump/usermode/ directory.
  • In Take 98, the Security Gateway crashes with a VMcore dump file in the /var/log/crash/<DATE>/vmcore/ directory.

Affected versions:

  • R81.20 Jumbo Hotfix Accumulator Take 96
  • R81.20 Jumbo Hotfix Accumulator Take 98

How to check if your Security Gateway may be affected?

  1. Connect to the command line on the Security Gateway.
  2. Check the current R81.20 Jumbo Hotfix Accumulator Take:
    cpinfo -y all
  3. Check the current SecureXL mode:
    1. Run:
      fwaccel stat
    2. Examine the column "Name":
      • "KPPAK" means Kernel Mode - this SK article does not apply.
      • "UPPAK" means User Mode - this SK article applies.

Solution

Contact Check Point Support to get a Hotfix for this issue.

-------
If you like this post please give a thumbs up(kudo)! 🙂
(1)
1 Reply
the_rock
Legend
Legend

Thanks for that Lesley. Lets hope fix is rolled into next jumbo release.

Andy

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events