IPS Updates & Threat Emulation Not Working

[katarina_]

Hi Community,

I am facing an issue with IPS and Threat Emulation updates on our Check Point Sec GW running R81.20.

Issue:

- Threat Emulation is inactive, and IPS updates are failing.

- When trying to fetch updates via curl_cli, I receive:

• - Page not found! (for updates.checkpoint.com)
• - SSL cert issues (unable to get local issuer certificate).

- The fw rules allow outbound traffic to the net, and there is no proxy.

- DNS is properly configured, and other blades like Firewall, Anti-Bot, and IPS work fine.

Would appreciate any insights or similar experience,

Thanks in advance!

Katarina

[G_W_Albrecht]

How long are you facing this issue ? Such errors are mostly gone the next day...

[katarina_]

For a month, 2 days ago I upgraded mngmt to R82 and Anti-Bot & Anti-Virus Blade is enabled since then.

[Chris_Atkinson]

Are those blades enabled in the VSX Gateway object (VS0)?

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_ThreatPrevention_AdminGuide/...

[G_W_Albrecht]

How did you know that this is VSX ? That is not mentioned here at all...

[Chris_Atkinson]

The first screenshot says VS1 policy so I infered it...

[G_W_Albrecht]

I did overlook the policy name...