A mistake while Adding domain server on MDS

[Viktoria]

I tried to add a domain server on a MDS but an error occured: 

Then i did these actions:

- Connected to the Global Domain with SmartConsole

- Went to Security Policies >Threat Prevention > Custom Policy > Custom Policy Tools

- Went to Updates > IPS and clicked Update Now

And then new mistake occured: offline package version is not compatible with your security management version

What I have to do? Help me please

[PhoneBoy]

Recommend engaging with TAC here: https://help.checkpoint.com 

[Viktoria]

Thanks! But unfortunately they didn't help me. I need help from users who have faced this problem

[PhoneBoy]

Please send me the relevant TAC SR in a PM. 

[PhoneBoy]

Just to close the loop publicly, TAC can only assist if you have an active support agreement.
If this is part of an ongoing evaluation, your local Check Point office may be able to assist.

The more you can tell us about your environment and how you got to this point, the more likely someone in the community can assist.
This also includes basic version/JHF information.

[the_rock]

Hey @Viktoria 

Can you run ips stat command and send the output?

Andy

[the_rock]

Just an update on this. @Viktoria and I connected offline, so will do remote session probably tomorrow. I also created MDS in the lab and will try replicate.

Best,

Andy

[the_rock]

Hey Viktoria,

I think I got it. Check out below and if its not clear what you need to do, lets do remote tomorrow. I will also email about offline.

Andy

***********************************

[Expert@CP-MDS:0]# mdsenv andy-test
Error: There is no Domain Management Server with Name/IP: andy-test
[Expert@CP-MDS:0]# mdsenv 172.16.10.233
[Expert@CP-MDS:0]# mdsenv andy_test_Server
[Expert@CP-MDS:0]#

******************************************************

 

 

 

[the_rock]

To update further on this, Viktoria and I had remote, there were some connectivity issues, so we fixed this, urlf update worked, but though routes are fine and curl_cli -k also works and can get to CP updates site, ips still fails. I built a lab on my end and worked fine, so we will have another remote Friday and see if we can update to latest jumbo and reboot, hope that works, If not, we will compare with working lab and see what might be "missing".

Andy

[the_rock]

Further update...so we discovered that there is not enough space in / dir when checking to update to recommended jumbo 150 for R81.10, so since reboot failed to fix the issue, advised Viktoria to have her colleague extend the HDD, add 4 more GB of ram in vsphere, boot up the box and check the space. If same problem, boot into maintenance mode, run lvm_manager, try expand the / dir that way, reboot again and try ips update.

Below link may also be helpful.

Andy

https://support.checkpoint.com/results/sk/sk94671

[the_rock · Accepted solution]

@Viktoria informed me her colleague reinstalled the MDS, gave it 140 GB of ram, more memory, like we discussed, and after this IPS update worked, which is what we suspected, since we fixed basic connectivity before that. I told her to get permanent license and I also suggest upgrading to R81.20 (plus, whatever recommended jumbo is)

Andy