Support Center > Search Results > SecureKnowledge Details
Using 'Block List' / 'Allow List' feature in Anti-Spam Blade causes policy installation failure Technical Level
Symptoms
  • Policy installation fails when 'Block List' / 'Allow List' in the Anti-Spam Software Blade is populated with IP addresses:

    '/opt/CPsuite-R76/fw1/conf/<Policy_Name>.pf', line N: ERROR: Duplicate keys (00000000, 00000000, 00000000, 00000000) in table 'aspam_wb_ip'
    Error compiling IPv6 flavor.
    Compilation failed.
    Operation ended with errors.
Solution

This problem was fixed. The fix is included in:

Check Point recommends to always upgrade to the most recent version.

 

For R76 and R77 Security Management Server, managing R76 Security Gateway, Check Point Support can supply a Hotfix.
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.
For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix installation instructions:

  1. Hotfix has to be installed on Security Management Server / Multi-Domain Security Management Server.

    Note: In Management HA environment, this procedure must be performed on both Management Servers.
  2. Procedure:

    • On Gaia OS - using CPUSE:

      Make sure to install the latest build of the CPUSE Agent.

      Refer to sk92449: CPUSE - Gaia Software Updates (including Gaia Software Updates Agent):

      • Section "(4-A-c)" / "(4-A-d)" - refer to import instructions for Offline procedure
      • Section "(4-B-a)" - refer to installation instructions for Hotfixes

      Note: Reboot is required.

    • On SecurePlatform/Linux/IPSO OS - using Legacy CLI:

      1. Transfer the hotfix package to the machine (into some directory, e.g., /some_path_to_fix/).

      2. Unpack and install the hotfix package:

        [Expert@HostName]# cd /some_path_to_fix/
        [Expert@HostName]# tar -zxvf fw1_wrapper_<HOTFIX_NAME>.tgz
        [Expert@HostName]# ./fw1_wrapper_<HOTFIX_NAME>

        Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.
      3. Reboot the machine.

Applies To:
  • 01066147 , 01251314 , 01125692 , 01124557 , 01188675 , 01148650 , 01206696
  • 01125697 , 01251261 , 01125856

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment