Failed to run IPS update (Schedule Update) (But IPS having latest Packages)

[Chinmaya_Naik]

Hi Checkmates.

As I can see IPS having latest packages but still we getting below error.

kindly suggest

Regards

@Chinmaya_Naik 

[Chinmaya_Naik]

Hi Checkmates,

Have any one clear me about this error message.

Most of time we see this error message in our new R80.30 Mgmt Server.

But IPS having latest signature.

Can we ignore ? Or what is the significance ?

Regards

@Chinmaya_Naik 

[Chris_Atkinson]

This should be investigated further with TAC.

For the IPS blade, prior to R80.20, the updates were downloaded to the Security Management Server, and only after you installed policy, the gateways could enforce the updates. Starting from R80.20, the gateways can directly download the updates.

[Chinmaya_Naik]

Hi @Chris_Atkinson ,

Thanks for the update.

I am going to raise SR.

[Mario_Zuker]

Hi,

we would like to follow on this SR

can you email me with the SR number to marioz@checkpoint.com

Thanks

[Mario_Zuker]

Hi @Chinmaya_Naik ,

From the SR details we learn there is a pattern where the first IPS update attempt always fails at 03:00 AM while next attempt at 03:01 AM is successful

Can you check the DNS request/response timings from the Mgmt server and Cluster member?

Do you see any related drop logs with the Mgmt as source IP address around 03:00 AM?

Thanks

[Chinmaya_Naik]

Hi @Mario_Zuker 

Issue automatically resolved now. Reason may be on DNS request / response.

Regards

@Chinmaya_Naik