Attempted to fetch policy failed ...

[marcinw]

Hi,

I got a problem with GW, trusted connection with SMS is established, I can push successfully policy from SMS to that SMB GW, policy seems to be fetched, however in 5 seconds I got information "Attempted to fetch policy from an IP address that is different from the one used to get certificate. Please check management's IP objects in Smart Dashboard".

Is this problem related to masters file and that policy overwritten every time to internal IP address ? I checked "masters" file on SMB GW and there is no IP address, but DNS addresses of my SMS, unfortunately I don't run any DNS server to resolve this DNS, however I added static DNS entry  on SMB GW. unfortunately no joy.

[Jerry]

https://community.checkpoint.com/t5/SMB-Appliances-and-SMP/Problem-to-install-policy/td-p/22766

[marcinw]

I think I have a different problem, I can push policy from SMS, I see message in left corner "Policy installation succeeded"

Even on SMB device for around 20 seconds I see the message that Policy has been fetched and "green tick", but next I see the message that message "Attempted to fetch policy failed..."

[Jerry]

I got that, have had the same many times mate.
try changing SmartConsole for the very-latest one 🙂
what is the "cpinfo -y all" - can you share here ?

[marcinw]

The output for the command :

Checkpoint_MGMT> cpinfo -y all

This is Check Point CPinfo Build 914000202 for GAIA
[IDA]
        No hotfixes..

[CPFC]
        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  155

[MGMT]
        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  155

[FW1]
        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  155

FW1 build number:
This is Check Point Security Management Server R80.30 - Build 016
This is Check Point's software version R80.30 - Build 001

[SecurePlatform]
        HOTFIX_GOGO_LT_HEAT_JHF Take:  155

[CPinfo]
        No hotfixes..

[DIAG]
        No hotfixes..

[Reporting Module]
        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  155

[CPuepm]
        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  155

[VSEC]
        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  155

[SmartLog]
        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  155

[R7520CMP]
        No hotfixes..

[R7540CMP]
        No hotfixes..

[R76CMP]
        HOTFIX_R80_30_JHF_COMP  Take:  155

[SFWR77CMP]
        No hotfixes..

[R77CMP]
        HOTFIX_R80_30_JHF_COMP  Take:  155

[R75CMP]
        No hotfixes..

[NGXCMP]
        No hotfixes..

[EdgeCmp]
        No hotfixes..

[SFWCMP]
        No hotfixes..

[FLICMP]
        No hotfixes..

[SFWR75CMP]
        No hotfixes..

[MGMTAPI]
        No hotfixes..

[CPUpdates]
        BUNDLE_CPINFO   Take:  53
        BUNDLE_INFRA_AUTOUPDATE Take:  32
        BUNDLE_DEP_INSTALLER_AUTOUPDATE Take:  13
        BUNDLE_R80_30_JUMBO_HF_MAIN_gogoKernel  Take:  155
        BUNDLE_R80_30_JUMBO_HF_MAIN_SC  Take:  167

[SFWR80CMP]
        No hotfixes..

[CPDepInst]
        No hotfixes..

[AutoUpdater]
        No hotfixes..

[Jerry]

HOTFIX_R80_30_JUMBO_HF_MAIN Take: 196

this "TAKE" should help 🙂

[Jerry · Accepted solution]

in other words following cpinfo is from the device where the very same issue occured in the past, I've managed to get this cpinfo right after the issue was fixed:

***

This is Check Point CPinfo Build 914000202 for GAIA
[IDA]
No hotfixes..

[MGMT]
HOTFIX_R80_30_JUMBO_HF_MAIN Take: 196

[CPFC]
HOTFIX_R80_30_JUMBO_HF_MAIN Take: 196

[FW1]
HOTFIX_R80_30_JUMBO_HF_MAIN Take: 196

FW1 build number:
This is Check Point Security Management Server R80.30 - Build 024
This is Check Point's software version R80.30 - Build 158
kernel: R80.30 - Build 166

[SecurePlatform]
HOTFIX_R80_30_JUMBO_HF_MAIN Take: 196

[CPinfo]
No hotfixes..

[DIAG]
No hotfixes..

[PPACK]
HOTFIX_R80_30_JUMBO_HF_MAIN Take: 196

[CVPN]
HOTFIX_R80_30_JUMBO_HF_MAIN Take: 196

[SmartLog]
HOTFIX_R80_30_JUMBO_HF_MAIN Take: 196

[Reporting Module]
HOTFIX_R80_30_JUMBO_HF_MAIN Take: 196

[CPuepm]
HOTFIX_R80_30_JUMBO_HF_MAIN Take: 196

[VSEC]
HOTFIX_R80_30_JUMBO_HF_MAIN Take: 196

[R7520CMP]
No hotfixes..

[R7540CMP]
No hotfixes..

[R76CMP]
No hotfixes..

[SFWR77CMP]
No hotfixes..

[R77CMP]
No hotfixes..

[R75CMP]
No hotfixes..

[NGXCMP]
No hotfixes..

[EdgeCmp]
No hotfixes..

[SFWCMP]
No hotfixes..

[FLICMP]
No hotfixes..

[SFWR75CMP]
No hotfixes..

[MGMTAPI]
No hotfixes..

[CPUpdates]
BUNDLE_CPINFO Take: 50
BUNDLE_INFRA_AUTOUPDATE Take: 32
BUNDLE_DEP_INSTALLER_AUTOUPDATE Take: 13
BUNDLE_R80_30_JUMBO_HF_MAIN Take: 196
BUNDLE_CME_WRAPPER Take: 79
BUNDLE_R80_30_JUMBO_HF_MAIN_SC Take: 210
BUNDLE_R80.30_SC Take: 200

[CME]
No hotfixes..

[AutoUpdater]
No hotfixes..

[CPDepInst]
No hotfixes..

***

try to update your gaia and install new SmartConsole R80.30 (latest one).

when done, let us know if that fixed the problem.

Good luck!

[marcinw]

yes it's working , thank you!