After running June LiveUpdate for the Checkpoint Event Collector 4.3 you get an unknown exception

Article:TECH164080  |  Created: 2011-07-07  |  Updated: 2011-09-14  |  Article URL http://www.symantec.com/docs/TECH164080
Article Type
Technical Solution


Issue



After you run June LiveUpdate for the checkpoint collector you notice that you don't receive any more event. Looking in the checkpoint.log file you notice an exception error.


Error



In the Checkpoint collector log you get this error message :

WARN    2011-07-04 12:04:56,314 Collectors.3120.wGroup.[workinggroup0].SensorThread     Thread-46       [Sensor: Sensor 0]     Exception in Sensor thread while reading device. Details: java.lang.Exception: OpsecLeaSensor(CheckPoint_cp.test) error in readDevice(). Sensor will be reopened. Details: Unknown exception. at com.symantec.cas.ucf.sensors.Opsec.OpsecLeaSensor.readDevice(OpsecLeaSensor.java:306) at com.symantec.cas.ucf.collector.SensorJob.pollSensor(SensorJob.java:212) at com.symantec.cas.ucf.collector.SensorJob.run(SensorJob.java:292) a java.lang.Thread.run(Thread.java:662)


Environment



This is happening if you are using LiveUpdate Administrator 2.x (LUAdmin).


Cause



The reason for this error is that the LUAdmin server is missing the package 2.08.00 for the OpsecLea Sensor. The Checkpoint collector from June 2011 LiveUpdate expect to work with this version only.

Search for a file called Product.Catalog.LiveUpdate and look for the OPsec section:

March 2011 LU:

[root@atr-ses-dl380 LiveUpdate]# cat Product.Catalog.LiveUpdate | grep Op
OpsecLEASensor.English.status Success
OpsecLEASensor.English.installDate 1306922578442
OpsecLEASensor.English.seqNum 20110415
OpsecLEASensor.English.version 2.07.00
OpsecLEASensor.English.lastAttempt 1306926142511
OpsecLEASensor.English.display Opsec Lea Sensor
OpsecLEASensor.English.agentRestart true
OpsecLEASensor.English.installLocation /opt/Symantec/sesa/Agent/collectors/lib
OpsecLEASensor.English.releaseNotes /opt/Symantec/sesa/Agent/collectors/lib/LiveUpdate-OpsecLEASensor.txt

June 2011 LU:

OpsecLEASensor.English.status No update available
OpsecLEASensor.English.installDate 1309775434825
OpsecLEASensor.English.seqNum 20110701
OpsecLEASensor.English.version 2.08.00
OpsecLEASensor.English.lastAttempt 1309780851573
OpsecLEASensor.English.display Opsec Lea Sensor
OpsecLEASensor.English.agentRestart true
OpsecLEASensor.English.installLocation /opt/Symantec/sesa/Agent/collectors/lib
OpsecLEASensor.English.releaseNotes /opt/Symantec/sesa/Agent/collectors/lib/LiveUpdate-OpsecLEASensor.txt
 

You need to run the 2.08.00 version.


Solution



The solution is to point the machine to run LiveUpdate from the internet directly rather than to the LUAdmin to get the latest sensor. 

If you cannot connect to the internet it is advices to roll back the changed in the Checkpoint collector by following information in the release note -> LiveUpdate-Collector.txt in the Checkpoint Collector folder.





Article URL http://www.symantec.com/docs/TECH164080


Terms of use for this information are found in Legal Notices