Check Point processes are down after CPUSE installation of a package that does not require reboot

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk110235
Technical Level
Product	Quantum Security Management, Multi-Domain Security Management, Quantum Security Gateways, ClusterXL, Cluster - 3rd party
Version	R75.40 (EOL), R75.40VS (EOL), R75.45 (EOL), R75.46 (EOL), R75.47 (EOL), R76 (EOL), R77 (EOL), R77.10 (EOL), R77.20, R77.30 (EOL)
OS	Gaia
Platform / Model	All
Date Created	07-Mar-2016
Last Modified	14-Apr-2016

Symptoms

Check point processes are down at the end of the following scenario:
1. Major upgrade of Security Gateway / Security Management Server / Multi-Domain Security Management Server from R75.4X / R76 to R77.20 / R77.30 is performed using CPUSE Agent build 974 and lower
2. Security Gateway / Management Server is rebooted
3. CPUSE Agent build 974 and lower is used to install a package that does not require reboot after its installation
4. Package installation using CPUSE completes successfully (without rebooting the server, since installation of this package does not require reboot)
5. Check Point software stops working (e.g., not possible to connect with SmartConsole clients to Management Server)
6. Output of "cpwd_admin list" command on Security Gateway / Management Server shows that processes are in terminated state - the "STAT" column shows "T" for processes (e.g., CPD, FWM, FWD)

Cause

During the installation, a change in environment variables is required. However, the CPUSE Agent calls "cpstart" without the new environment variables.

Solution

This problem was fixed. The fix is included since:

CPUSE Agent build 994

Follow these steps when using CPUSE Agent build 974 and lower:

To resolve the current issue:
- Reboot the Gaia machine.
To prevent this issue:
1. Before installing the CPUSE package that does not require reboot after its installation, manually restart the CPUSE Agent:
  1. Connect to command line on Gaia machine.
  2. Log in to Expert mode.
  3. Disable monitoring of the CPUSE Agent daemon by Check Point WatchDog:
    
    [Expert@HostName]# $DADIR/bin/dastop
  4. Manually stop the CPUSE Agent daemon:
    
    [Expert@HostName]# DAClient stop
  5. Enable monitoring of the CPUSE Agent daemon by Check Point WatchDog:
    
    [Expert@HostName]# $DADIR/bin/dastart
  6. Manually start the CPUSE Agent daemon:
    
    [Expert@HostName]# DAClient start
2. Using CPUSE (in Gaia Portal, or Gaia Clish), install the CPUSE package that does not require reboot after its installation.
3. Verify that all required Check Point processes are up and executing on Gaia machine:
  
  [Expert@HostName:0]# cpwd_admin list
  Note: The "STAT" column should show "E" for all listed processes.

Related solutions:

sk92449: CPUSE - Gaia Software Updates (including Gaia Software Updates Agent)

Give us Feedback

Please rate this document

[1=Worst,5=Best]

Comment
	Submitting rating