sk181661 - Policy installation on a Maestro Security Group fails after enabling the Maestro Fastforward feature

Policy installation on a Maestro Security Group fails after enabling the Maestro Fastforward feature

Product: Maestro HyperScale Firewall
Version: R81.20
OS: Gaia
Last Modified: 2025-01-16

Symptoms

After enabling the Maestro Fastforward feature, policy installation on a Maestro Security Group fails with this error in SmartConsole:

  Maestro acceleration (MXL) failed, reason: General error. Please check /var/log/acl_cli.log on the security group SMO for more details.

Solution

This problem was fixed. The fix is included in:

Jumbo Hotfix Accumulator for R81.20 starting from Take 43

If you choose not to upgrade, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix prerequisite:
The Security Group Members must have the R81.20 Jumbo Hotfix Accumulator Take 26 installed.

Connect to the command line on the Security Group.
Examine the list of the installed hotfixes:
```
cpinfo -y all
```

Hotfix installation instructions:

Copy the hotfix package to the Security Group to some directory (for example, /var/log/).
Connect to the command line on the Security Group.
If your default shell is Gaia gClish, log in to the Expert mode:
```
expert
```
Assign the required permissions to the hotfix package:
```
chmod -v 777 /var/log/maestro_hft_gw-1-8.i386.rpm
```

Install the hotfix package:

rpm -Uhv --force --nodeps /var/log/maestro_hft_gw-1-8.i386.rpm

In SmartConsole, install policy on the Security Gateway object for this Security Group.

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.