sk181803 - Possible failure to boot on a Security Gateway with IPS...

[JohAicher]

Any info how often the memory corruption on Sec. GWs is happening?

Any info if we should patch our GWs immediately?

Why is this SK not recommended?

Any tool to check the filesystem to know if the mem corruption has happend:

"During policy installation or signatures package update, a rare memory corruption might occur that leads to a corruption of the filesystem"

Reg. Johann

[CaseyB]

There is an older discussion on the topic here: sk181803 checkmates discussion 

Based off the other thread, the issue has been in the code base for several years and the incident has only been reported once. Sounds like it is quite a rare scenario; however, I have patched my gateway to Take 130 and I'm not having any issues. 

[the_rock]

As @CaseyB said, its very rare issue and TAC informed there will be fixes released for R80.40 and R81 soon and its fixed in take 130 of R81.10 version. Now, I hope 130 will be reocmmended either by end of this year or very beginning of 2024. Alternatively, your best bet is to upgrade to R81.20, which is super solid code and it has been recommended since November.

Best,

Andy