> Source: [sk120680](https://support.checkpoint.com/results/sk/sk120680)

# sk120680 - "An error has occurred, please contact your administrator" error displayed during ESOD scan

| Property | Value |
|----------|-------|
| Solution ID | sk120680 |
| Date Created | 2017-10-01 |
| Last Modified | 2017-10-02 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * Esod scan seems to start however an error: "An error has occurred, please contact your administrator" is presented right before it ends.
* updating ESOD database to latest according to [sk50361](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk50361) did not solve the issue
* Following logs are found in the file cvpnd.elg:  
  ``
  [PID][DATE TIME][GW_NAME] [CVPN_ERROR] icsLogger: Scanner component error: luapp.out:263: bad argument #1 to `gsub' (string expected, got nil)``  
  ``
  [PID][DATE TIME][GW_NAME] [CVPN_ERROR] ICS::GwLibWrapper::scanResultsToXML: failed during ics_process_scan_results``  
  ``
  [PID][DATE TIME][GW_NAME] [CVPN_ERROR] getLastError: getLastError returned:Scanner component error: luapp.out:263: bad argument #1 to `gsub' (string expected, got nil)``  
  ``
  [PID][DATE TIME][GW_NAME] [CVPN_ERROR] ICS::GwLibWrapper::scanResultsToXML: ICS returned error: 3, message: Scanner component error: luapp.out:263: bad argument #1 to `gsub' (string expected, got nil)``  
  ``
  [PID][DATE TIME][GW_NAME] [CVPN_ERROR] ICS::IcsManager::processScanResults: Failed to process scan results icsErrorCode is: 3``

## Cause

A syntax issue in one of the ESOD policies.  

For example:  

`<fw_provider id="20" provider="kerio" name="Kerio Firewall" modified="1432213680" active="true">`  
` <remedy message="Portal administrator requires you to have Kerio Firewall running." url="http://www.kerio.com" url_text="Kerio Firewall"/>`  
` <installed/>`  
` <enabled/>`  
` <running/>`  
` </fw_provider>`  
` <fw_provider id="21" provider="blackice" name="BlackIce Firewall" modified="1432213680" active="true">`  
` <remedy message=`**"Portal administrator requires you to have BlackIce Firewall running."** `/>`  
` <installed/>`  
` <enabled/>`  
` <running/>`  
` </fw_provider>`  

In this case, the BlackICE firewall misses URL and URL_TEXT attributes.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content