Support Center > Search Results > SecureKnowledge Details
Centrally Managed Edge Gateways issues with Anti-Virus and URL Filtering
Symptoms
  • Edge Gateways when managed by R77.10, R77.20, R77.30, may encounter the following issues:

    1. Vstream Anti-Virus updates fail to download
    2. URL Filtering engine fails to initiate and operate
Solution

Check Point provides a Hotfix for this issue.
The Hotfix should be installed on the Security Management /  Multi-Domain Security Management server.
Note: In Management HA environment, this procedure must be performed on all Security Management / Multi-Domain servers.


Hotfix installation instructions for Security Management Server:

Show / Hide


Product R77.30
Security Management
 (TGZ)

Procedure:
  1. Download the hotfix package from the table above, transfer the hotfix package to the machine (into some directory, e.g., /some_path_to_fix/).

  2. Unpack the hotfix package:

    [Expert@HostName]# cd /some_path_to_fix/
    [Expert@HostName]# tar -zxvf Check_Point_Hotfix_R77.X_sk110219.tgz

  3. Install the hotfix:

    [Expert@HostName]# ./fw1_wrapper_HOTFIX_GEYSER_HF_BASE_563_990563001_1

    Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.

  4. Reboot the machine.


Hotfix installation instructions for Multi-Domain Security Management
:

Show / Hide
  1. Hotfix consists of two parts:

    • Security Management part
    • Multi-Domain Security Management (MDS) part

    Product R77.30
    Security Management
     (TGZ)
    Multi-Domain Security Management  (TGZ)


  2. Download both hotfix packages from the table above, transfer them to the machine into two separate directories:

    • Security Management package into e.g., /some_path_to_SMS_fix/
    • MDS package into e.g., /some_path_to_MDS_fix/


  3. Unpack the Security Management hotfix:

    [Expert@HostName]# cd /some_path_to_SMS_fix/
    [Expert@HostName]# tar -zxvf Check_Point_Hotfix_R77.X_sk110219.tgz

  4. Install the Security Management hotfix:

    [Expert@HostName]# ./fw1_wrapper_HOTFIX_GEYSER_HF_BASE_563_990563001_1

    Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.

  5. Do not reboot yet. 

  6. Unpack the MDS hotfix package:

    [Expert@HostName]# cd /some_path_to_MDS_fix/
    [Expert@HostName]# tar -zxvf Check_Point_Hotfix_R77.X_sk110219_multi_domain.tgz


  7. Install the MDS hotfix:

    [Expert@HostName]# ./mds_HOTFIX_GEYSER_HF_BASE_563_990563004_1

    Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.

  8. Reboot the machine

 

For other supported versions, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.
For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Applies To:
  • This SK replaces sk109935
  • 01953509 , 01956245 , 01963037 , 01956277
  • 01960781
  • 01940812 , 01962259 , 01962721 , 01975660 , 01962611 , 01956242

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment