- Products
- Learn
- Local User Groups
- Partners
- More
Policy Insights and Policy Auditor in Action
19 November @ 5pm CET / 11am ET
Access Control and Threat Prevention Best Practices
Watch HereOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hi all:
Yesterday we upgraded an 5400 appliance to R81.10 Take 130. Since then, when you log in this message shows up:
End of banner message from server
admin@192.168.x.x's password:
Last login: Fri Apr 19 08:49:52 2024 from 192.168.x.x
if: Expression Syntax.
then: Command not found.
[admin@gw01 ~]#
We are still checking the logs files of the system but nothing found yet. It seems the interpreter line from a script is incorrect but, which one?
Any idea?
Thanks in advanced
Regards
Hi,
We fixed it by changing the admin shell from /bin/csh to /bin/bash.
Thank you for your answers!
Regards
Can you try to change the banner message? Maybe there is a weird character in it or something? Maybe go back to something default like: This system is for authorized use only.
You can change the banner in the webGUI -> System Management -> Messages -> Banner Message
Or via CLI
Hi Lesley,
Thanks for your answer. I changed the banner message but the message is still there:
Using username "admin".
Pre-authentication banner message from server:
| This system is for authorized use only
End of banner message from server
admin@192.168.x.x's password:
Last login: Fri Apr 19 09:36:48 2024 from 192.168.x.x
if: Expression Syntax.
then: Command not found.
[admin@gw01 ~]#
Regards
Have you done a reboot? And tested with different SSH user?
I am afraid what Albrecht also states that probably a reinstall is needed. You can try with TAC for them to check.
I cannot find any open bugs or relevant SK's.
I would suggest to do a fresh install of the GW, looks like some file corruption to me.
Hi,
We fixed it by changing the admin shell from /bin/csh to /bin/bash.
Thank you for your answers!
Regards
That was first thing that came to my mind when I read your post. You can always change it to /etc/cli.sh if you dont want to go to expert mode when logging in
example -> chsh -s /etc/cli.sh admin
Best,
Andy
Strange ! That has changed during upgrade? Or just no banner issue before upgrade?
The banner was configured before the upgrade yes. Don't know why this message showed up after it.
And you did not start admin session in expert mode previously? Mostly done for WinSCP connect...
Yes, I did several days before the upgrade in order to transfer the 81.10 images (81.10 base and JHF).
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 25 | |
| 19 | |
| 14 | |
| 12 | |
| 12 | |
| 10 | |
| 6 | |
| 6 | |
| 5 | |
| 4 |
Wed 19 Nov 2025 @ 11:00 AM (EST)
TechTalk: Improve Your Security Posture with Threat Prevention and Policy InsightsThu 20 Nov 2025 @ 05:00 PM (CET)
Hacking LLM Applications: latest research and insights from our LLM pen testing projects - AMERThu 20 Nov 2025 @ 10:00 AM (CST)
Hacking LLM Applications: latest research and insights from our LLM pen testing projects - EMEAWed 26 Nov 2025 @ 12:00 PM (COT)
Panama City: Risk Management a la Parrilla: ERM, TEM & Meat LunchWed 19 Nov 2025 @ 11:00 AM (EST)
TechTalk: Improve Your Security Posture with Threat Prevention and Policy InsightsThu 20 Nov 2025 @ 05:00 PM (CET)
Hacking LLM Applications: latest research and insights from our LLM pen testing projects - AMERThu 20 Nov 2025 @ 10:00 AM (CST)
Hacking LLM Applications: latest research and insights from our LLM pen testing projects - EMEAThu 04 Dec 2025 @ 12:30 PM (SGT)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - APACThu 04 Dec 2025 @ 03:00 PM (CET)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEAWed 26 Nov 2025 @ 12:00 PM (COT)
Panama City: Risk Management a la Parrilla: ERM, TEM & Meat LunchAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY