the device is rebooting

[ilya_shustov]

Hello,
A problem has appeared on device 12400, the device is part of a high availability cluster, it reboots approximately once a day, this does not depend on the increased load on the device, this can happen both at night and during the day, approximately once every 24-36 hours, I am posting information about the device below and information from the file messages, full file messages in attachment.

This is Check Point CPinfo Build 914000190 for GAIA
[FW1]
HOTFIX_R77_30
HOTFIX_GEYSER_HF_BASE_861
HOTFIX_R77_30_JUMBO_HF Take: 351
HOTFIX_R77_30_JHF_T351_BLOCK_PORTAL Take: 3

FW1 build number:
This is Check Point's software version R77.30 - Build 165
kernel: R77.30 - Build 165

[SecurePlatform]
HOTFIX_R77_30_JUMBO_HF Take: 351

[CPinfo]
No hotfixes..

[PPACK]
HOTFIX_R77_30
HOTFIX_R77_30_JUMBO_HF Take: 351

[CVPN]
HOTFIX_R77_30
HOTFIX_R77_30_JUMBO_HF Take: 351

[CPUpdates]
BUNDLE_R77_30_JUMBO_HF Take: 351
BUNDLE_R77_30_JHF_T351_BLOCK_PORTAL Take: 3

[DIAG]
HOTFIX_R77_30

Oct 26 15:52:08 2024 Fw1-nyag-nng-abk-1 xpand[17420]: version is R77.30
Oct 26 16:02:06 2024 Fw1-nyag-nng-abk-1 httpd2: HTTP logout from 10.3.137.212 as admin
Oct 26 16:02:06 2024 Fw1-nyag-nng-abk-1 httpd2: Cannot get pid
Oct 26 16:02:06 2024 Fw1-nyag-nng-abk-1 xpand[17420]: version is R77.30
Oct 27 00:26:57 2024 Fw1-nyag-nng-abk-1 syslogd 1.4.1: restart.
Oct 27 00:26:57 2024 Fw1-nyag-nng-abk-1 syslogd: local sendto: Network is unreachable
Oct 27 00:26:57 2024 Fw1-nyag-nng-abk-1 kernel: klogd 1.4.1, log source = /proc/kmsg started.
Oct 27 00:26:57 2024 Fw1-nyag-nng-abk-1 kernel: Linux version 2.6.18-92cp (builder@Lnx30BccCmp6) (gcc version 4.1.1 20061011 (Red Hat 4.1.1-30)) #1 SMP Wed Jun 19 17:15:03 IDT 2019

[_Val_]

R77.30 is out of support for a long time. However, if you still have a support contract, try opening a case with TAC

[Chris_Atkinson]

12400 hardware is also EOL, please refer: https://www.checkpoint.com/support-services/support-life-cycle-policy/ 

[PhoneBoy]

For the error messages you’re seeing in the messages file: https://support.checkpoint.com/results/sk/sk99579

However, as suggested by others, you’re running End of Support hardware and code versions.

[Lesley]

Time for hardware diag. This one is specific for R77.30 and the 12400

appliance:

https://support.checkpoint.com/results/sk/sk97251

The /var/log/messages logs are not relevant for this issue, they are just the outcome of the reboot. 

Would recommend to buy new firewall