Question about IKE/IPsec SA error

[RemoteUser]

Hi mates,

I have a question regarding a LAB environment I'm working on for Remote Access. (R82 JHF 107)

I’m seeing the following error when I try to list the IKE SAs:

(1) List all IKE SAs
(2) * List all IPsec SAs
(3) List all IKE SAs for a given peer (GW) or user (Client)
(4) * List all IPsec SAs for a given peer (GW) or user (Client)
(5) Delete all IPsec SAs for a given peer (GW)
(6) Delete all IPsec SAs for a given User (Client)
(7) Delete all IPsec+IKE SAs for a given peer (GW)
(8) Delete all IPsec+IKE SAs for a given User (Client)
(9) Delete all IPsec SAs for ALL peers and users
(0) Delete all IPsec+IKE SAs for ALL peers and users

* To list data for a specific CoreXL instance, append "-i <instance number>" to your selection.

(Q) Quit

*******************************************

1
Error fetching sa from table
Error fetching sa from table

Peer 10.99.99.1, user md5 d8631d2fc95e7642:

Realm:

Machine cert authentication: false

IKE SA <b301bca4b01110d0,cb7aa907b1454e13>

Peer 10.99.99.2, user md5 85b55194b03416cc:

Realm:

Machine cert authentication: false

IKE SA <95e5c6de0c0f29a9,6c77f28e20087970>

Peer 10.99.99.3, user md5 85b55194b03416cc:

Realm: vpn

Machine cert authentication: false

IKE SA <dc361c9c9390cbe9,7e068694c9f49f9c>

I haven't been able to find much information about the "Error fetching sa from table" message.

Has anyone seen this before or can explain what could be causing it?

Any help would be appreciated.

Thanks!

[Chris_Atkinson]

Given recent CVEs is there a reason you are using the older JHF in the lab?

If not I would patch and see if the issue persists before taking it with support.

See also:

https://community.checkpoint.com/t5/SASE-and-Remote-Access/vpn-tu-Error-fetching-sa-from-table/td-p/...

[RemoteUser]

cplp list
ID(PATCH:PROC) STATUS MODE PIDS INSTALLED COMMENT
--------------------------------------------------------------------------
cpcert:cpca* ready livepatch 0/0 2026-09-13 09:37:29 CVE-2026-85102 CVE-2026-85103
cpcert:ike* armed livepatch 2/2 2026-09-13 09:37:29 CVE-2026-85102 CVE-2026-85103
cpcert:vpn* armed livepatch 4/4 2026-09-13 09:37:29 CVE-2026-85102 CVE-2026-85103
cpcert:vpnrad* ready livepatch 0/0 2026-09-13 09:37:29 CVE-2026-85102 CVE-2026-85103
cpcert:wstlsd* ready livepatch 0/0 2026-09-13 09:37:29 CVE-2026-85102 CVE-2026-85103
cpcert_cprid:cprid* armed livepatch 1/1 2026-09-13 09:37:28 CVE-2026-85102 CVE-2026-85103
cpikev2:iked* armed livepatch 2/2 2026-09-15 05:43:55 CVE-2026-85102 CVE-2026-85103
vpn1:iked* jumbofix livepatch 0/0 2026-08-27 15:54:03 sk185033
vpn1:vpnd* jumbofix livepatch 0/0 2026-08-27 15:54:03 sk185033

is a cluster deplpoyed in AWS