Solved: Broken Smart-1 Cloud instance

nmelay2 · ‎2024-08-30

Hello all,

I reverted the database on a Smart-1 Cloud instance.
Now policy installation fails with the following error: "This policy version references purged object(s) this cannot be installed."
This error is documented in sk180571: "Contact Check Point Support to get assistance for this issue."

Support for this customer is pending renewal, so I cannot involve TAC right now.

Anyone ever hit this issue?

nmelay2 · ‎2024-08-31

OK, found what the issue was.

Restarting the Smart-1 Cloud instance did not fix it.

Install Database on the management server completed without error.
Policy installation failed with the "purged object(s)" error message, even with only either Access Control or Treat Prevention ticked, or with accelerated installation disabled.
(Policy installation task would stay queued in SmartConsole and had to be cleared manually.)

Entering the Updates tool in a SmartConsole policy brought a "Failed to get DB object" error message.
IPS updates status showed a warning sign, with a "loading IPS update statuses" message when hovered on.
IPS database appears to be broken, and manual update went bad (using SmartConsole crashed SmartConsole, update using SMS failed or maybe restarted SMS not sure).

The real fix was just to manually switch the IPS database version (Policy Tools > IPS > drop-down menu > Switch to version).
I guess the management database revision I reverted to was so far away in time (still was just the previous one) that the referenced IPS version had been purged locally, and this broke the IPS state.

View solution in original post

the_rock · ‎2024-08-30

When you say reverted database, you mean installed one of previous revisions?

Andy

nmelay2 · ‎2024-08-31

Yes I do.
Reverted to the previous revision from a few weeks before.

the_rock · ‎2024-08-30

If you wish, happy to do remote and we can check together, let me know.

Andy

nmelay2 · ‎2024-08-31

No longer needed, but thanks for the offer. 🙂

nmelay2 · ‎2024-08-31

OK, found what the issue was.

Restarting the Smart-1 Cloud instance did not fix it.

Install Database on the management server completed without error.
Policy installation failed with the "purged object(s)" error message, even with only either Access Control or Treat Prevention ticked, or with accelerated installation disabled.
(Policy installation task would stay queued in SmartConsole and had to be cleared manually.)

Entering the Updates tool in a SmartConsole policy brought a "Failed to get DB object" error message.
IPS updates status showed a warning sign, with a "loading IPS update statuses" message when hovered on.
IPS database appears to be broken, and manual update went bad (using SmartConsole crashed SmartConsole, update using SMS failed or maybe restarted SMS not sure).

The real fix was just to manually switch the IPS database version (Policy Tools > IPS > drop-down menu > Switch to version).
I guess the management database revision I reverted to was so far away in time (still was just the previous one) that the referenced IPS version had been purged locally, and this broke the IPS state.

the_rock · ‎2024-09-01

Great job! I saw thats what the sk mentioned as well.

nmelay2 · ‎2024-09-01

Thanks!

Yeah, the SK mentioned the IPS manual update breakage, it just did not explain how to work around it. 😉
I guess TAC has a more involved solution, running a script to fix the database or something, but the version switch trick just worked.

Edit: sent feedback to the SK

Are you a member of CheckMates?

Broken Smart-1 Cloud instance