CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.

First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E


Results 1 to 5 of 5

Thread: Error when getting Gateway Data with SmartUpdate

  1. #1
    Join Date
    Rep Power

    Default Error when getting Gateway Data with SmartUpdate


    At this moment we are upgrading two CheckPoints to NGXR65 on two Nokia IP350 platforms. After upgrading all the software, we have established the trust and forced the policies on them.

    Everything has worked fine.

    Our next step was to attach the license via SmartUpdate. We have managed to install these licences without any problem. However, when trying to update the gateway data, with the 'Get Gateway Data..." we got the following error: "Unable to connect. Make sure that: the network connection is up, trust is established, and cprid connectios are allowed"

    We have doublechecked that (there is network connectivity, the trust is established and the cprid is allowed) but it still does not work.

    Any clue?

    Thanks a lot

  2. #2
    Join Date
    Rep Power

    Default Re: Error when getting Gateway Data with SmartUpdate

    Got the same problem under R65. Just upgraded to R70 and having bigger problem. including this. Getting a error in the messages file about fw_runfilter_ex.....is_version_at_least . get the seam error if it try a push the policy a second time after SIC initialized

  3. #3
    Join Date
    Rep Power

    Default Re: Error when getting Gateway Data with SmartUpdate

    This can be a broken symbolic link,

    A symbolic link pointing at $CPDIR was not created properly. (why this happens I have no idea)
    possible solution.

    1. Run a SmartUpdate debug on Management server by setting environment variable SU_DEBUG_LEVEL=105 It will log to su.elg in /var/suroot/log/

    If the debug complains about not being able to find $CPDIR on the Security Gateway, then the problem is that a symbolic link was not created properly.

    2. Go to /opt/CPshared and create the missing symbolic link called "5.0" and point it to the actual $CPDIR directory of the machine.

    I believe the "machine" is referring to the device you are attempting to "get data from" and the symbolic link to that device is broken and you would need to create one.

    Look at the su.elg file, you should be able to see where it failed.

  4. #4
    Join Date
    Rep Power

    Default Re: Error when getting Gateway Data with SmartUpdate

    I know what the problem is now. i have a script that dose a cpstop and cpstart over night to enable a "export" to happen without any errors.

    SUROOT not defined correctly thus causes the error. added into the script and also into a temp /etc/profile.d file but still i get the error. maybe i need to export it. i also have a problem adding packages into the repositiry. looks like it the same issus. i have not got a varable defined correctly.

    Anyone have a list of scripts/profile that i need to run to define all the CP variables? maybe i try running as my cpstart under the os logon ID i created when i installed splat.

    using "expert" to cpstop and cpstart works ok.
    Last edited by Kiwi_wgtn; 2009-08-02 at 18:26. Reason: more info

  5. #5
    Join Date
    Rep Power

    Default Re: Error when getting Gateway Data with SmartUpdate

    Please disable IPS.

Similar Threads

  1. "Get Gateway Data" failing -- SOLUTION
    By denbesten in forum SmartUpdate
    Replies: 4
    Last Post: 2011-08-19, 05:41
  2. SmartUpdate Question
    By sfa8us in forum CCSE NGX R65 Exam 156-315.65
    Replies: 13
    Last Post: 2010-01-27, 06:40
  3. Smart Defense Error Message: Data was not found
    By BettyB in forum IPS Blade (Formerly SmartDefense)
    Replies: 3
    Last Post: 2008-08-05, 12:00
  4. Smartupdate NGX licensing
    By pop_alex in forum Licensing
    Replies: 2
    Last Post: 2006-12-21, 04:04
  5. Error: "Data connection address spoofing"
    By srikrishnak in forum Miscellaneous
    Replies: 0
    Last Post: 2005-09-22, 01:29

Tags for this Thread


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts