Support Center > Search Results > SecureKnowledge Details
Check Point processes are down after CPUSE installation of a package that does not require reboot
Symptoms

  • Check point processes are down at the end of the following scenario:

    1. Major upgrade of Security Gateway / Security Management Server / Multi-Domain Security Management Server from R75.4X / R76 to R77.20 / R77.30 is performed using CPUSE Agent build 974 and lower
    2. Security Gateway / Management Server is rebooted
    3. CPUSE Agent build 974 and lower is used to install a package that does not require reboot after its installation
    4. Package installation using CPUSE completes successfully (without rebooting the server, since installation of this package does not require reboot)
    5. Check Point software stops working (e.g., not possible to connect with SmartConsole clients to Management Server)
    6. Output of "cpwd_admin list" command on Security Gateway / Management Server shows that processes are in terminated state - the "STAT" column shows "T" for processes (e.g., CPD, FWM, FWD)
Cause

During the installation, a change in environment variables is required. However, the CPUSE Agent calls "cpstart" without the new environment variables.


Solution

This problem was fixed. The fix is included since:

 

Follow these steps when using CPUSE Agent build 974 and lower:

  • To resolve the current issue:

    • Reboot the Gaia machine.

  • To prevent this issue:

    1. Before installing the CPUSE package that does not require reboot after its installation, manually restart the CPUSE Agent:

      1. Connect to command line on Gaia machine.

      2. Log in to Expert mode.

      3. Disable monitoring of the CPUSE Agent daemon by Check Point WatchDog:

        [Expert@HostName]# $DADIR/bin/dastop

      4. Manually stop the CPUSE Agent daemon:

        [Expert@HostName]# DAClient stop

      5. Enable monitoring of the CPUSE Agent daemon by Check Point WatchDog:

        [Expert@HostName]# $DADIR/bin/dastart

      6. Manually start the CPUSE Agent daemon:

        [Expert@HostName]# DAClient start

    2. Using CPUSE (in Gaia Portal, or Gaia Clish), install the CPUSE package that does not require reboot after its installation.

    3. Verify that all required Check Point processes are up and executing on Gaia machine:

      [Expert@HostName:0]# cpwd_admin list

      Note: The "STAT" column should show "E" for all listed processes.

 

Related solutions:

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment