This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Help

Who rated this post

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Lesley
MVP Gold
MVP Gold
‎2025-02-25 01:56 PM

Let's discuss: Important Notification to Customers with SecureXL User Mode (UPPAK) enabled, on R81.2

We have received the following message today, I assume more people did. Let's discuss this topic. 

Anyone experienced this issue yet? I have some setups running this take but have not seen this issue. 

I see SK already has been updated with more information so that is good. I assume that the fix will be included in upcoming takes? And with a crash, gateway does full reboot? Or some processes are restarting and there is a ''hickup''? 

We would like to bring the following to your immediate attention. We have identified that configuration of your environment with SecureXL User Mode (UPPAK) enabled on your Security Gateway may have compatibility issues with Take 96 / Take 98.

Action required :
Please follow sk183181 for remediation steps.

Symptoms

  • Security Gateway with the R81.20 Jumbo Hotfix Accumulator Takes 96 and Take 98 may crash frequently when SecureXL works in the User Mode (UPPAK).

Cause

Race condition may occur in the ADP acceleration driver when updating network routes for SecureXL in the User Mode (UPPAK):

  • In Take 96, the process "usim_x86" crashes with a core dump file in the /var/log/dump/usermode/ directory.
  • In Take 98, the Security Gateway crashes with a VMcore dump file in the /var/log/crash/<DATE>/vmcore/ directory.

Affected versions:

  • R81.20 Jumbo Hotfix Accumulator Take 96
  • R81.20 Jumbo Hotfix Accumulator Take 98

How to check if your Security Gateway may be affected?

  1. Connect to the command line on the Security Gateway.
  2. Check the current R81.20 Jumbo Hotfix Accumulator Take:
    cpinfo -y all
  3. Check the current SecureXL mode:
    1. Run:
      fwaccel stat
    2. Examine the column "Name":
      • "KPPAK" means Kernel Mode - this SK article does not apply.
      • "UPPAK" means User Mode - this SK article applies.

Solution

Contact Check Point Support to get a Hotfix for this issue.

-------
Please press "Accept as Solution" if my post solved it 🙂
(1)
Who rated this post