Our Checkpoint Products are stilling sitting at R77.10. Checkpoint has release Jumbo Hotfix Accumulator for R77.10 (gypsy_hf_base_021).
The installation procedures from Command Line is quite simple:
- Transfer the Jumbo Hotfix Accumulator to the machine /var/tmp folder
- Unpack the Jumbo Hotfix Accumulator:
[Expert@CP-1]# cd /var/tmp
[Expert@CP-1]# tar zxvf Check_Point_R77.10.linux.tgz
- Install the Jumbo Hotfix Accumulator:
[Expert@CP-1]# ./UnixInstallScript
Note: The script will stop all of Check Point services (
cpstop
) – read the output on the screen. - Reboot the machine.
- Verify Installation with Command “cpinfo -y all”
Symptoms:
I followed those steps and installed this Jumbo Hotfix on both cluster members at the same time also rebooted them at the same time. But after waited a couple of minutes, one of cluster members shows disconnected from Smartview Monitor.
Troubleshooting:
I went back to SmartDashboard and checked SIC status and found it was out of SIC. I was confusing what could cause the SIC lost from this cluster member. Should I reset SIC?
SmartView Tracker saved me this time. There is one log shows firewall policy inconsistencies existing between cluster members.
Number: 7250420
Date: 16Aug2015
Time: 10:09:07
Origin: CP-DMZ-1
Type: Log
Action:
Information: sync: Inconsistencies exist between policies installed on the cluster members. Please reinstall the policy on the cluster.
Product: Security Gateway/Management
Product Family: Network
Policy Info: Policy Name: defaultfilter
Created at: Sun Aug 16 07:12:25 2015
Installed from: CP-Management