> Source: [sk166192](https://support.checkpoint.com/results/sk/sk166192)

# sk166192 - Security Gateway may crash during Jumbo Hotfix install/uninstall from R80.30 JHF Takes 163-168

| Property | Value |
|----------|-------|
| Solution ID | sk166192 |
| Date Created | 2020-04-06 |
| Last Modified | 2020-05-26 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- In a rare scenario on a cluster environment, Security gateway running R80.30 JHF Takes 163-168 may crash during uninstall or install of a new Jumbo Hotfix on top of these Takes.

## Cause

The redundant */opt/CPsuite-R80.30/fw1/bin/cpprod_util* file exist on the device.

<br />

## Solution

To continue with the Jumbo Hotfix install/uninstall from Takes 163-168, follow the below procedure. [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get assistance if needed.  

### Procedure

**Note**: a full outage will occur during this procedure, therefore it should be performed in a maintenance window.

1. Run the below command in Expert mode to delete the redundant *cpprod_util* file:  
   `[Expert@Host]# rm /opt/CPsuite-R80.30/fw1/bin/cpprod_util`   

2. Check the current version you are using by running:   
   `[Expert@Host:0]# fw ctl get int fwha_version`  
   `fwha_version = `**3321**  

3. On the Active cluster member, set the version to the value of original *fwha_version - 50* :  
   \[`Expert@Host:0]# fw ctl set int fwha_version `**3271**  

4. The Standby cluster members will go to "Ready" state.   

5. Uninstall the current Jumbo Hotfix Take from all Standby cluster members.  

6. Install [R80.30 Jumbo Hotfix Take 180](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) or above on the second cluster member that now is in "Ready" state..  

7. On the Active cluster member, set the version to value of original *fwha_version + 50* :   
   `[Expert@Host:0]# fw ctl set -f int fwha_version `**3371**  

8. Check the *fwkern.conf* file. The *fwha_version* value should appear with the value of original *fwha_version +50* :  
   `[Expert@Host:0]# cat /var/opt/fw.boot/modules/fwkern.conf`  
   `fwha_version=`**3371**  

9. *A fail-over will happen (full-outage)* . The Active cluster member will go to the "Ready" state, and the "Ready" member will go to the "Active" state.  

10. Uninstall the R80.30 Jumbo Hotfix Take from the former Active cluster member that now is in "Ready" state..  

11. Install [R80.30 Jumbo Hotfix Take 180](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) or above on the former Active cluster member that now is in "Ready" state.  

12. When the installation is completed, remove the *fwha_version* parameter from the *fwkern.conf* file.  

13. Reboot the recently updated cluster member.  

14. After reboot, cluster will run with a regular states (no "Ready" state should appear) and the members will be fully synced.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content