Verification Error - Policy Failure

[JPYDX]

Hi,

I have policy install failures on all my gateways.

Verification problems from install_policy.elg shows..

27/02/18 10:27:32,008 INFO com.checkpoint.management.dleserver.coresvc.intern al.LegacyPolicyLoader$PolicyLoadTask.doWork:175 [taskExecutor-27]: Completed to load legacy policy for product 'Threat'
27/02/18 10:27:45,203 ERROR com.checkpoint.management.dleserver.coresvc.intern al.PolicyLoaderTask.processExecutionErrors:105 [taskExecutor-29]: Execution for instance 3768cf4f-9242-4a5c-b491-951d0f1006fc had failed due to an execution exception
org.apache.commons.exec.ExecuteException: Process exited with an error: 1 (Exit value: 1)
at org.apache.commons.exec.DefaultExecutor.executeInt ernal(DefaultExecutor.java:377)
at org.apache.commons.exec.DefaultExecutor.access$200 (DefaultExecutor.java:46)
at org.apache.commons.exec.DefaultExecutor$1.run(Defa ultExecutor.java:188)
27/02/18 10:27:45,203 ERROR com.checkpoint.management.dleserver.coresvc.intern al.PolicyLoaderTask.processExecutionErrors:159 [taskExecutor-29]: All policy loading commands had failed due to execution exceptions
27/02/18 10:27:45,203 INFO com.checkpoint.management.dleserver.coresvc.intern al.PolicyLoaderTask.executeLoadCommands:184 [taskExecutor-29]: Loader executions completed
27/02/18 10:27:45,203 INFO com.checkpoint.management.dleserver.coresvc.intern al.PolicyLoaderTask.executeLoadCommands:204 [taskExecutor-29]: Command's full output:

There are no specifics SK articles for this, however I have tried moving mv $FWDIR/conf/last_dump.C $FWDIR/conf/last_dump.C.ORIG.

Any other suggestions?

[ShadowPeak.com]

Hi,

I have policy install failures on all my gateways.

Verification problems from install_policy.elg shows..

27/02/18 10:27:32,008 INFO com.checkpoint.management.dleserver.coresvc.intern al.LegacyPolicyLoader$PolicyLoadTask.doWork:175 [taskExecutor-27]: Completed to load legacy policy for product 'Threat'
27/02/18 10:27:45,203 ERROR com.checkpoint.management.dleserver.coresvc.intern al.PolicyLoaderTask.processExecutionErrors:105 [taskExecutor-29]: Execution for instance 3768cf4f-9242-4a5c-b491-951d0f1006fc had failed due to an execution exception
org.apache.commons.exec.ExecuteException: Process exited with an error: 1 (Exit value: 1)
at org.apache.commons.exec.DefaultExecutor.executeInt ernal(DefaultExecutor.java:377)
at org.apache.commons.exec.DefaultExecutor.access$200 (DefaultExecutor.java:46)
at org.apache.commons.exec.DefaultExecutor$1.run(Defa ultExecutor.java:188)
27/02/18 10:27:45,203 ERROR com.checkpoint.management.dleserver.coresvc.intern al.PolicyLoaderTask.processExecutionErrors:159 [taskExecutor-29]: All policy loading commands had failed due to execution exceptions
27/02/18 10:27:45,203 INFO com.checkpoint.management.dleserver.coresvc.intern al.PolicyLoaderTask.executeLoadCommands:184 [taskExecutor-29]: Loader executions completed
27/02/18 10:27:45,203 INFO com.checkpoint.management.dleserver.coresvc.intern al.PolicyLoaderTask.executeLoadCommands:204 [taskExecutor-29]: Command's full output:

There are no specifics SK articles for this, however I have tried moving mv $FWDIR/conf/last_dump.C $FWDIR/conf/last_dump.C.ORIG.

Any other suggestions?

What is the version of management and gateway? My guess is R80+ management and R77.30 gateway.

Are you able to successfully install just the Access Control policy without Threat Prevention (TP)? If so, manually update TP/IPS signatures and try again. Can't say I've seen this before, a debug of cpm/fwm is probably your next step as those Java exceptions aren't too helpful. Also visit the Audit log view in SmartConsole and try to figure out what was changed just prior to this starting to occur.

[JPYDX]

What is the version of management and gateway? My guess is R80+ management and R77.30 gateway.

Are you able to successfully install just the Access Control policy without Threat Prevention (TP)? If so, manually update TP/IPS signatures and try again. Can't say I've seen this before, a debug of cpm/fwm is probably your next step as those Java exceptions aren't too helpful. Also visit the Audit log view in SmartConsole and try to figure out what was changed just prior to this starting to occur.

Tim -

R80.10 Management with R80.10 Gateways - fully updated with latest Jumbo Hotfix.

Threat Prevention succeeds - access control is the one that fails.

Ill debug cpm/fwm.

Any suggestions based on the above?

[HowdyHai]

did you find the solution for this issue?