Error: 'IPS' is not responding

[Rahul_Borah]

Hi Expert,

 I am faceing an error on my R80.20 Checkpoint IPS. Kindly share your suggestion. Error screen shot attached.

Note : IPS blade is enable.

Regards,

RB

[G_W_Albrecht · Accepted solution]

See sk163752: "'IPS' is not responding. Verify that 'IPS' is installed on the gateway" error

This is a cosmetic issue caused by a failure on the Security Gateway to report its status and the status of its software blades.

The functionality of the software blades is not affected in any way. To resolve the error, disable and then re-enable the IPS blade.

[Rahul_Borah]

Thanks for your reply.
I have a query, Is there any impact in my existing IPS configuration/ existing installed IPS signature If I disable the IPS blade.

[Kaiji]

There should be no impact. When you reenable the blade you have an option to chose to use settings from your existing Threat Prevention Policy. 

[Matlu]

Hello,

In a ClusterXL HA, the "ips off" and "ips on", are applied on both Cluster members, or only on the Active one?

Is it to apply the commands, and send to install policies?

Regards

[PhoneBoy]

It only affects the member on which you type that command.
Which means: it will need to be entered on each member of the cluster.

[Ancom]

The reload of IPS blade affects the cluster failover activities in any way? Thank you in advance.

[Matlu]

Hello,

I have followed the  sk163752  instructions to the letter, but I still have the "cosmetic error" in the SmartConsole.

The detail is that the SMS that we have, is a CLOUD SERVICE, the GW are On-Premise equipments.

It has occurred to me to try to restart the SMS, but I would understand that this should be done by the TAC, as it is a Cloud product, right?

Greetings.

[biskit]

I also have this issue and can't resolve it.

The ICA cert expired, which caused all gateway SIC certs to expire.  I've renewed the ICA cert and re-established SIC to all gateways.  Everything is now working except for IPS reporting the error that it is not responding.

#ips stat says it's running and has the latest database version.

I've run #ips off followed by #ips on.  Still getting the error.

I've unticked IPS, installed the policy, ticked IPS and installed again.  Still no joy.

What else can I try to fix this error?

[Tal_Paz-Fridman]

I suggest opening a ticket with TAC.

Point them to this SK. There are other workarounds but this needs to be examined together with someone from TAC.

[MarcosCuevas]

You fixed the mistake. How did you do it?

[cdelcarmen]

IPS off and IPS ON on both cluster member and then installing policy fixed it for me. 

[Sajgon107]

I tried disable IPS in the settings of GW object, do IPS OFF /ON on both members and policy install but these 2 steps did not help. I had to do reboot of both nodes which solved the problem.