Support Center > Search Results > SecureKnowledge Details
Software Blade Update failed from non-SMO when configured in bridge mode Technical Level
Symptoms
  • Software blade updates fail from non-SMO when the Security Gateway is configured in bridge mode.

    Anti-Bot/Anti-Virus blade update fail with error "Update failed. Contract entitlement check failed. Gateway cannot access internet ('https://updates.checkpoint.com/WebService/services/DownloadMetaDataService'). Check connectivity and proxy settings."

  • When testing with curl ("curl_cli -v -cacert $CPDIR/conf/ca-bundle.crt https://updates.checkpoint.com"), there is no connectivity issue
Cause

In client to server traffic, a correction layer is performed, connection is recorded and offloaded to SecureXL. 

In the return traffic, from the server to the client, no correction is done on the traffic and the traffic is accelerated. 

This can cause the traffic to be routed to the wrong Security Gateway Module (SGM) because correction is not done on both directions.


Solution
Note: To view this solution you need to Sign In .