- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Why do Hackers Love IoT Devices so Much?
Join our TechTalk on Aug 17, at 5PM CET | 11AM EST
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Hi Checkmates!
Yesterday I applied the update from version R80.40 JHA take 139 to version R80.40 JHA take 156 for the pair of 6200 Plus gateways that supply the ClusterXL system. I was surprised by the long time spent updating, so much so that I wanted to check for any error messages by accessing the virtualized console via LOM.
During the upgrade phase, I was unable to access the LOM web interface and had to wait for the update activities to finish to access the LOM console.
After the update, I noticed on the front panel of both gateways the intermittent red flashing of the ALARM LED.
I'm sure the LEDs weren't flashing before the update!
Everything is working as expected, checks carried out through the appliance health check function do not detect anything abnormal. Opened i TAC CASE and was instructed to run a Hardware Diagnostic Tool diagnosis... even if i'm quite confident is an update issue.
Have you ever had a similar case? In order to avoid having to stop the machines and access via the physical console, do you think it is possible to restart a node and start the diagnostic software via LOM virtualized console (obviously after generating the boot pen drive)?
Best regards and thanks for your feedback,
Gianni.
Hm, thats tricky issue...are you able to uninstall new jumbo and see if problem is there after the reboot?
Andy
Does anything unexpected show in the hardware health section of the GAiA portal for either appliance?
Everything is fine
the above output is from lom unless i am mistaken and not gaia ,
lom sensors and gaia are somewhat different ,
gaia bases activation of it's led on the result of "show sysenv all" command ,
please show output of command (e.g. of possible cause that cannot be seen in lom, bios might have moved to secondary , which might also explain the time it took for upgrade to finish and possibly lom access issue)
you got it!
Bios value is invalid , this is what is causing the alarm , i will check with HW team if they wish to read why this machine moved to secondary bios
The weird thing is that both gateway have invalid bios; i'll suggest command output to TAC.
Best regards,
Gianni.
Please refer to sk108517 further to the above.
And did you ask for RMA already ?
Not yet, hope to find other solutions.
TKS,
Gianni.
Hi,
Following Sharon's comments, can you kindly open SR with TAC and provide here the SR #?
We will contact you offline with some troubleshooting steps and mitigation to address that error
Regards,
Dolev
Thank guys for your support!
This is the SR number SR#6-0003221846
Gianni.
for sure SR#6-0003221846
Keep us posted please how it gets solved, I would really like to know.
Cheers,
Andy
Hi there, I am really upset with this case.
Checkpoint will proceed with RMA of both devices.
Excellent Easter holidays are expected 😞
Thanks u all,
Gianni.
But wait...why RMA if boxes are working properly? Can you ask them if there is any way to clear that message without RMA-ing the devices?
I asked exactly what you asked for;
As TAC said:
You can try by totally powering down the appliance to see if the bio error would clear. If it's not clear, we would need to RMA the device.
There is an official SK that recommend to RMA the unit upon seeing this errors.
At this point, after power cycle the unit will boot with primary BIOS and therefore you will not see the errors; however we will not be able to investigate the cause.
The unit is fully functional, and shouldn't be RMAed, the SR will be assigned to the relevant team and shortly we will arrange a session with RnD primes for an investigation.
We appreciate you cooperation and I'll personally explain the situation better over the session.
Re-reading the whole post again, it certainly seems like somewhat difficult issue to investigate, thats for sure. Lets hope that @GianniPapetti wont have to RMA the boxes.
See sk108517 - three readings have to be bad for RMA:
1. The "Hardware Health
" section in Gaia Portal shows for Sensor "BIOS
":
Invalid
"Off
"2. Query for SNMP OID / SNMP Trap for OID .1.3.6.1.4.1.2620.1.3000.0.12.0 returns: "the BIOS has failed, using recovery BIOS
"
3. The dmidecode
command shows the BIOS is booting up from the Secondary or recovery BIOS:
[Expert@GHost:0]# dmidecode -t 11 # dmidecode 2.7 SMBIOS 2.8 present. Handle 0x0022, DMI type 11, 5 bytes. OEM Strings String 1: Secondary BIOS OR: String 1: Recovery BIOS
I read the sk, but not sure if in @GianniPapetti case all 3 match. I believe its only one, but I could be mistaken.
Hi,
Seems like my request was not yet received by the case owner, please hold with that - No need to RMA at this point.
Regards,
Dolev
Sure, let's hope for the best.
We await further investigations, i'll be more confident with BIOS redundancy.
Gianni
keep us updated 🙂
Awesome news, tx for sharing @GianniPapetti
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY