"Error: Cannot assign the Global IPS policy - The version of IPS on the Domain Management Server and in the Global policy must be the same"
||Multi-Domain Security Management, IPS
||R77 (EOL), R77.10 (EOL), R77.20, R77.30 (EOL)
||Gaia, SecurePlatform 2.6, Linux
|Platform / Model
The following errors appear for some Domain Management Servers when assigning Global Policy after successfully performing Global IPS Update (either online, or by using an offline IPS package):
Action in progress... Please wait ...
Active Domain Management Server for Domain <Name_of_Domain> is <Name_of_Domain_Server> on Multi-Domain Server <Name_of_MDS>
<Name_of_MDS> error : Failed to decompress the global IPS Updates package.
<Name_of_MDS> error : Failed to initialize connections with Domain Management Servers.
<Name_of_Domain_Server> : IPS update process started on Domain Management Server <Name_of_Domain_Server>.
... ... ...
<Name_of_Domain_Server> : Assign Global Policy operation started.
<Name_of_Domain_Server> error: Error: Cannot assign the Global IPS policy - The version of IPS on the Domain Management Server and in the Global policy must be the same.
Perform an IPS online update on the Global IPS policy and try again. If the problem persists, contact Check Point Technical Support.
<Name_of_Domain_Server> error: Disconnected from Domain Management Server. Check Domain Management Server status. Operation failed.
Global Policy operation complete for active Domain Management Servers on Multi-Domain Server 'No MDS name specified'
for Global Policy '<Name_of_Global_Policy>'
For those Domain Management Servers, on which assigning of Global Policy has succeeded, the SmartDomain Manager still reports that the update time of the IPS policy package is incorrect (although the debug of FWM daemon shows that IPS was updated successfully).
Flow of events:
- CRC marker file for IPS package is corrupted on the involved Domain Management Servers.
- IPS update fails on the involved Domain Management Servers.
- Assigning of Global Policy continues, and eventually fails due to IPS versions mismatch.
Note: To view this solution you need to