Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
nmelay2
Participant
Jump to solution

Broken Smart-1 Cloud instance

Hello all,

I reverted the database on a Smart-1 Cloud instance.
Now policy installation fails with the following error: "This policy version references purged object(s) this cannot be installed."
This error is documented in sk180571: "Contact Check Point Support to get assistance for this issue."

Support for this customer is pending renewal, so I cannot involve TAC right now.

Anyone ever hit this issue?

0 Kudos
1 Solution

Accepted Solutions
nmelay2
Participant

OK, found what the issue was.

Restarting the Smart-1 Cloud instance did not fix it.

Install Database on the management server completed without error.
Policy installation failed with the "purged object(s)" error message, even with only either Access Control or Treat Prevention ticked, or with accelerated installation disabled.
(Policy installation task would stay queued in SmartConsole and had to be cleared manually.)

Entering the Updates tool in a SmartConsole policy brought a "Failed to get DB object" error message.
IPS updates status showed a warning sign, with a "loading IPS update statuses" message when hovered on.
IPS database appears to be broken, and manual update went bad (using SmartConsole crashed SmartConsole, update using SMS failed or maybe restarted SMS not sure).

The real fix was just to manually switch the IPS database version (Policy Tools > IPS > drop-down menu > Switch to version).
I guess the management database revision I reverted to was so far away in time (still was just the previous one) that the referenced IPS version had been purged locally, and this broke the IPS state.

View solution in original post

0 Kudos
7 Replies
the_rock
Legend
Legend

When you say reverted database, you mean installed one of previous revisions?

Andy

0 Kudos
nmelay2
Participant

Yes I do.
Reverted to the previous revision from a few weeks before.

0 Kudos
the_rock
Legend
Legend

If you wish, happy to do remote and we can check together, let me know.

Andy

0 Kudos
nmelay2
Participant

No longer needed, but thanks for the offer. 🙂

0 Kudos
nmelay2
Participant

OK, found what the issue was.

Restarting the Smart-1 Cloud instance did not fix it.

Install Database on the management server completed without error.
Policy installation failed with the "purged object(s)" error message, even with only either Access Control or Treat Prevention ticked, or with accelerated installation disabled.
(Policy installation task would stay queued in SmartConsole and had to be cleared manually.)

Entering the Updates tool in a SmartConsole policy brought a "Failed to get DB object" error message.
IPS updates status showed a warning sign, with a "loading IPS update statuses" message when hovered on.
IPS database appears to be broken, and manual update went bad (using SmartConsole crashed SmartConsole, update using SMS failed or maybe restarted SMS not sure).

The real fix was just to manually switch the IPS database version (Policy Tools > IPS > drop-down menu > Switch to version).
I guess the management database revision I reverted to was so far away in time (still was just the previous one) that the referenced IPS version had been purged locally, and this broke the IPS state.

0 Kudos
the_rock
Legend
Legend

Great job! I saw thats what the sk mentioned as well.

0 Kudos
nmelay2
Participant

Thanks!

Yeah, the SK mentioned the IPS manual update breakage, it just did not explain how to work around it. 😉
I guess TAC has a more involved solution, running a script to fix the database or something, but the version switch trick just worked.

Edit: sent feedback to the SK

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events