The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
vSEC Cluster in Microsoft Azure fails over intermittently
Technical Level
Solution ID
sk116470
Technical Level
Product
vSEC for Azure
Version
R77.30
OS
Gaia
Platform / Model
Azure
Date Created
22-Mar-2017
Last Modified
27-Mar-2017
Symptoms
vSEC Cluster in Microsoft Azure fails over intermittently.
Running the $FWDIR/scripts/azure_ha_test.py script (per sk110194) on cluster members shows that some tests failed.
Kernel debug ('fw ctl debug -m fw + drop') on cluster members shows that traffic is dropped: ... dropped by fwfrag_error Reason: Virtual defragmentation error: Duplicate fragment
Running the $FWDIR/scripts/azure_ha_test.py script (per sk110194) after unloading the security policy on cluster members shows: All tests were successful!
Debug of Azure HA daemon (per sk110194) shows in the $FWDIR/log/azure_had.elg file: Testing credentials... Error: curl exit is 7
(Note: This is an indication of a network connectivity issue)
Cause
Unsupported Hotfix(es) is(are) installed on vSEC Cluster in Microsoft Azure.
