Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
KostasGR
Collaborator

IPS Blade fails to update on the Standby member

Hello community

After upgrading a VSX VSLS cluster with 3 members from r80.30 to r81.10 take 66 we get the below error from Virtual Systems with the IPS Blade that fails to update on the Standby member with IPS Update description:

  • Update failed. Contract entitlement check failed. Gateway can not access internet Check connectivity and proxy settings.

Any ideas?

We have found sk167205 that seems to match on our case. 

Any ideas about the impact if we change of the below parameter?
 
Solution
Make sure to change the following parameter on the fly, and wait a few minutes for the issue to be resolved. Run:
# fw ctl set int fwha_silent_standby_mode 1
 
BR,
Kostas
0 Kudos
2 Replies
PhoneBoy
Admin
Admin

That parameter is described here; https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Allows the secondary member to communicate via primary member. 

0 Kudos
CheckPointerXL
Collaborator

I did:

fwha_cluster_hide_active_only=0
ccl_force_use_ccp=1
fwha_silent_standby_mode=1

 

and antispoofing in Detect mode on Sync interface

0 Kudos