Support Center > Search Results > SecureKnowledge Details
Using 'Block List' / 'Allow List' feature in Anti-Spam Blade causes policy installation failure Technical Level
  • Policy installation fails when 'Block List' / 'Allow List' in the Anti-Spam Software Blade is populated with IP addresses:

    '/opt/CPsuite-R76/fw1/conf/<Policy_Name>.pf', line N: ERROR: Duplicate keys (00000000, 00000000, 00000000, 00000000) in table 'aspam_wb_ip'
    Error compiling IPv6 flavor.
    Compilation failed.
    Operation ended with errors.

This problem was fixed. The fix is included in:

Check Point recommends to always upgrade to the most recent version.


For R76 and R77 Security Management Server, managing R76 Security Gateway, Check Point Support can supply a Hotfix.
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.
For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix installation instructions:

  1. Hotfix has to be installed on Security Management Server / Multi-Domain Security Management Server.

    Note: In Management HA environment, this procedure must be performed on both Management Servers.
  2. Procedure:

    • On Gaia OS - using CPUSE:

      Make sure to install the latest build of the CPUSE Agent.

      Refer to sk92449: CPUSE - Gaia Software Updates (including Gaia Software Updates Agent):

      • Section "(4-A-c)" / "(4-A-d)" - refer to import instructions for Offline procedure
      • Section "(4-B-a)" - refer to installation instructions for Hotfixes

      Note: Reboot is required.

    • On SecurePlatform/Linux/IPSO OS - using Legacy CLI:

      1. Transfer the hotfix package to the machine (into some directory, e.g., /some_path_to_fix/).

      2. Unpack and install the hotfix package:

        [Expert@HostName]# cd /some_path_to_fix/
        [Expert@HostName]# tar -zxvf fw1_wrapper_<HOTFIX_NAME>.tgz
        [Expert@HostName]# ./fw1_wrapper_<HOTFIX_NAME>

        Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.
      3. Reboot the machine.

This solution is about products that are no longer supported and it will not be updated
Applies To:
  • 01066147 , 01251314 , 01125692 , 01124557 , 01188675 , 01148650 , 01206696
  • 01125697 , 01251261 , 01125856

Give us Feedback
Please rate this document