Support Center > Search Results > SecureKnowledge Details
Policy installation on the 1100 appliance fails with Error "Installation failed. Reason: Security Management Server aborted connection ( port = 18191 )( IP = XX.XX.XX.XX )[ error no. 1 ]" Technical Level
Symptoms
  • Policy installation on 1100 appliance fails with below error: Installation failed. Reason: Security Management Server aborted connection ( port = 18191 )( IP = XX.XX.XX.XX )[ error no. 1 ].

  • export LINKS_C_DIR=0 ; /opt/CPSFWR77CMP-R80.XX/bin/fw_loader load -d -M /opt/CPSFWR77CMP-R80.XX/conf/.W

    Shows below error: [FW_LOADER 11074 4146825536]@MGMT[DATE] sslca_get_session_db: Using cache file /opt/CPSFWR77CMP-R80.XX/database//SessionCache [FW_LOADER 11074 4146825536]@MGMT[DATE] ckpSSLsession_FromBuf mismatching chain len [FW_LOADER 11074 4146825536]@MGMT[DATE] sslca_read_session: failed create session [FW_LOADER 11074 4146825536]@MGMT[DATE] auth_sslca_clnt_handler: failed to read session
  • # ls -latr /opt/CPshrd-R80.40/util/gzip* Shows that the gzip file is itself zipped

Cause

The presence of "gzip" in the file /opt/CPshrd-R80.40/util/gzip.gz indicates that the file is zipped.


Solution

This solution is for a centrally managed 1100 Security Gateway.

Verify the gzip file is zipped:

  1. Connect to the command line on the Security Management Server.

  2. Log in to Expert mode.

  3. Back up the current file:

    cp -v //opt/CPshrd-R80.40/util/gzip_BKP

  4. # ls -latr /opt/CPshrd-R80.40/util/gzip*

    -rwxr-x--- 1 admin bin 38983 DATE /opt/CPshrd-R80.XX/util/gzip.gz

  5. Replace the above zip.gz file with the one from  /usr/bin directory:

    # /usr/bin/gzip -d /opt/CPshrd-R80.40/util/gzip.gz

  6. Save the changes.

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment