Scheduled policy installation

[Maria_Pologova]

Hello.

For some reason scheduled policy installation on our MDM R80.20 is not being triggered. It worked once at the very first attempt.

Does anyone came across such problem? Wondering where to dig in this case?

[JozkoMrkvicka]

https://community.checkpoint.com/t5/Policy-Management/Install-Policy-Presets-not-working-on-R80-20/t...

[Maria_Pologova]

Oops, didn't see this thread. Thanks.
I'll ask here, since that thread is kinda stuck. Did you open a case with support, what did they tell?

[JozkoMrkvicka]

No case was opened so far. I would rather test it in R80.30, or with latest Take on R80.20 🙂

[Maria_Pologova]

We are on latest - 87 🙂
Will open a case on Monday and share the results in main thread.

[JozkoMrkvicka]

So it looks like they fixed it in R80.30, as I cannot reproduce the issue I faced in R80.20.

There is also protection that will not install the policy via Scheduled policy installation on the gateway which wasn't installed before. For example, my original policy package name for gateway GWC is POLICY_GWC.
If I select that I want to install Standard policy on all gateways (including GWC), the Scheduled policy installation did nothing for GWC gateway. It will not install Standard policy package on gateway GWC (where is expected to be policy package POLICY_GWC).

[Maria_Pologova]

I guess, that will be the last message in this thread 🙂

Check Point has a Hotfix for R80.20 to treat the issue. Soon will be included to Jumbo.

In R80.30 and .40 the issue is fixed.

[Michal_Gans]

You can use crontab and API script

#!/bin/bash -f
source /opt/CPshared/5.0/tmp/.CPprofile.sh
mgmt_cli -r true -d <domain> install-policy policy-package <package>