Security Gateway is unable to fetch contracts from Security Management server using contract

Support Center > Search Results > SecureKnowledge Details

Security Gateway is unable to fetch contracts from Security Management server using contract_util

Technical Level

Solution ID	sk163833
Technical Level
Product	Quantum Security Gateways, Quantum Security Management
Version	R80 (EOL), R80.10 (EOL), R80.20, R80.30, R80.40
Date Created	05-Jan-2020
Last Modified	05-Jan-2021

Symptoms

Fetching contracts on Security Gateways from the Security Management Server using contract_util fails with the following error:

fetching contracts data from management
download from management result: Failed to download contract information from User Center. Please try again in few minutes.
If this problem persists, please contact Check Point Customer Account Services.

SmartLog shows that traffic between the Security Management Server and the Security Gateway on service FW1_CPRID is dropped.

Cause

Communication on service FW1_CPRID is blocked between the Security Management Server and the Security Gateway.

Solution

In SmartConsole, create an explicit security rule to allow traffic from the Security Management Server to the relevant Security Gateways using the pre-defined Check Point service FW1_CPRID.
Install the Security policy.

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Give us Feedback

Please rate this document

[1=Worst,5=Best]

Comment
	Submitting rating