> Source: [sk111314](https://support.checkpoint.com/results/sk/sk111314)

# sk111314 - Threat Emulation images are stuck in initialization loop after engine upgrade to version 46.179

| Property | Value |
|----------|-------|
| Solution ID | sk111314 |
| Date Created | 2016-05-04 |
| Last Modified | 2016-06-15 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |
| Platform | TE |

## Symptoms

- * Files are not emulated on remote Threat Emulation appliance.

* Output of "*grep return $FWDIR/log/te_image_prep_util.elg* " command shows multiple lines with "`return code: 1`".

* Output of "*tecli show downloads images* " command on Threat Emulation appliance shows image status "`Initializing`" for more than 40 minutes on the same image.

* Issue started after upgrading Threat Emulation Engine to version 46.179 (output of "*tecli ad engine version* " command shows "`46.990000179`").

## Cause

Engine 46.990000179 is trying to initialize incompatible images and fails to download the correct images.

## Solution

Follow these steps:

1. Connect to command line on the problematic Threat Emulation appliance.

2. Log in to Expert mode.

3. Verify that the Threat Emulation Engine version is ***46.990000179***:

   ***\[Expert@HostName:0\]# tecli advanced engine version***
4. Download an [improved Threat Emulation Engine binary file](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=49247) (*temain.gz*) to your computer.

5. Transfer the improved Threat Emulation Engine binary file (*temain.gz* ) from your computer the problematic Threat Emulation appliance (into some directory, e.g., */some_path_to_fix/*).

6. Unpack the improved binary file:

   ***\[Expert@HostName:0\]# cd /some_path_to_fix/***
   ***\[Expert@HostName:0\]# gzip -d -v temain.gz***
7. Stop Check Point services:

   ***\[Expert@HostName:0\]# cpstop***
8. Backup the current binary file:

   ***\[Expert@HostName:0\]# mv -v $FWDIR/teCurrentPack/temain $FWDIR/teCurrentPack/temain_v179***
9. Copy the improved binary file:

   ***\[Expert@HostName:0\]# cp -v /some_path_to_fix/temain $FWDIR/teCurrentPack/***
10. Assign the required ownership and permissions:

    ***\[Expert@HostName:0\]# chown -v admin:bin $FWDIR/teCurrentPack/temain***

    ***\[Expert@HostName:0\]# chmod -v 750 $FWDIR/teCurrentPack/temain***
    ***\[Expert@HostName:0\]# stat $FWDIR/teCurrentPack/temain***
11. Start Check Point services:

    ***\[Expert@HostName:0\]# cpstart***
12. Connect with SmartDashboard to Security Management Server / Domain Management Server.

13. Go to ***Policy*** menu - click on ***Global Properties...***.

    On the ***FireWall*** pane:
    1. Check the box ***Accept outgoing packets originating from Gateway***

    2. Select ***First***

    *Example* :  
    [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk111314/a1605050759.jpg)](https://sc1.checkpoint.com/sc/SolutionsStatics/sk111314/a1605050759.jpg "Click the image to see it in full size in a new tab/window")
14. Install the Security Policy onto the Threat Emulation appliance.

    **Note:** In Private Cloud mode, install the policy onto ***both*** ThreatCloud Emulation gateway and local Threat Emulation Gateway.
15. If the new engine fails to start executing on the problematic Threat Emulation appliance, then restart Check Point services on it:

    ***\[Expert@HostName:0\]# cpstop ; cpstart***

**Important Note:** After following this procedure, it takes around one hour for each image to complete the initialization process.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content