SIC General Failure and T get event bad socket errors

From cpwiki.net
Revision as of 23:48, 8 March 2014 by Nighthawk (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search
Check Point Profressional Services

Problem Description

Unable to install firewall policies due to SIC error

Platform: Nokia

O.S.: ipso 6.2-GA039

fw version: NGX (R65) HFA_70

Testing SIC from withing the SmartDashboard...


SIC Status for firewall-1: Not Communicating
SIC General Failure [error no. 148]

error 148 according to sk16200... "This error means a timeout has occurred during the SIC process"


Errors in $CPDIR/log/cpd.elg

T_get_event: bad socket/type: 1200/0

If you tail the above file while testing SIC, the errors pour in...

tcpdump between management and the firewall show a good handshake and communication.

Root Cause

Suspected file descriptor or memory leak issue

Solution

restart or stop and start cpd

# cpwd_admin stop -name CPD -path "$CPDIR/bin/cpd_admin" -command "cpd_admin stop"
CPD stopped
cpwd_admin:
Process CPD (pid=953) stopped with command 'cpd_admin stop'. Exit code 0.
# cpwd_admin start -name CPD -path "$CPDIR/bin/cpd" -command "cpd"
cpwd_admin: 
Process CPD started successfully (pid=40018)