> Source: [sk120358](https://support.checkpoint.com/results/sk/sk120358)

# sk120358 - Threat Prevention policy installation fails with "Internal error"

| Property | Value |
|----------|-------|
| Solution ID | sk120358 |
| Date Created | 2017-09-11 |
| Last Modified | 2021-08-01 |
| Technical Level | General |
| Products | Security Management Server |
| Versions | R82.10, R82, R81.20, R82.20 |

## Symptoms

- * "Internal error" on Threat Prevention policy installation failure:  

  ![](https://sc1.checkpoint.com/sc//SolutionsStatics/sk120358/Capture1709060847.PNG)  

* Dynamic ID is configured for SMS and Mail:  

  ![](https://sc1.checkpoint.com/sc//SolutionsStatics/sk120358/did1709060851.PNG)  

* Since gateway sends the fail respond (cannot read the file), relevant logs can be found in the fetch logs ONLY:  

  `[MALWARE ..]@GW[DATE TIME] malware_policy_read_malware_current_policy: failed to open /opt/CPsuite-R80.20/fw1/state/__tmp/AMW/curr_policy.bin.`  
  `
  [MALWARE ..]@GW[DATE TIME] malware_policy_load_gw_db_ex:amw_file_name=/opt/CPsuite-R80.20/fw1/state/__tmp/AMW/local.gw_set`  
  `
  [MALWARE ..]@GW[DATE TIME] malware_policy_load_gw_db_ex:amw_file_name=/opt/CPsuite-R80.20/fw1/state/__tmp/AMW/local.gw_set`  
  `
  malware_policy_get_is_anti_malware_blade_ex: failed to read myself obj`

## Cause

The inspect preprocess removes all text after "//" and treats its like a comment (only if "//" is not in the first line).

## Solution

This problem was fixed. The fix is included in:

* [**R80.40 SmartConsole**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160736)
* **[R80.30 SmartConsole](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153153) from Build 42**
* **[R80.10 SmartConsole](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119612) from Build 161**

Check Point recommends to always upgrade to the most recent version.

As a workaround, change the Dynamic ID Settings to have the SMS as the first line and the Mail as the second line, also check whether there is any "//" locates non-first line.

1. In the SmartConsole, go to Manage \& Settings -\> Blades -\> Mobile Access -\> Configure in SmartDashboard -\> Authentication (In new opened dashboard)  

2. Click on the Edit button under Dynamic ID Settings.  

3. Swap the SMS and Mail lines.   

   Example:  

   FROM:  

   `mail:TO=$EMAIL;SMTPSERVER=`***SMTP_SERVER*** `;FROM=`***email@server.com*** `;BODY=$RAWMESSAGE`  
   `sms:`***SOME_URL***`&user=$USERNAME&password=$PASSWORD&to=$PHONE&text=$MESSAGE`  

   TO:  

   `sms:`***SOME_URL*** `&user=$USERNAME&password=$PASSWORD&to=$PHONE&text=$MESSAGE`  
   `mail:TO=$EMAIL;SMTPSERVER=`***SMTP_SERVER*** `;FROM=`***email@server.com***`;BODY=$RAWMESSAGE`  

4. Save the changes and close SmartConsole.  

5. Publish the changes and install the Threat Prevention policy.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content