IPS failing updates

[andyjgw]

Afternoon all

The last week, our R77.20 IPS has been failing updates, whether on schedule or initiated manually. All proxy and credential settings are correct, despite it asking us to check otherwise.

When I captured a trace as it passed through TMG, I noticed that there was the SSL certificate being returned from CP on the HTTPS request, and after that the connection was dropped. Would this be a certificate issue perhaps, any clue how to resolve this?

Thanks
AW

[ShadowPeak.com]

IPS updates are probably signed with SHA-256 which vanilla R77.20 does not support, check this:

sk103839: Check Point update and online services migration to SHA-256 based certificates

[varera]

IPS updates are probably signed with SHA-256 which vanilla R77.20 does not support, check this:

sk103839: Check Point update and online services migration to SHA-256 based certificates

Was about to say just that...