> Source: [sk168672](https://support.checkpoint.com/results/sk/sk168672)

# sk168672 - Policy installation on R77.X Security Gateway fails with many syntax error in .def files

| Property | Value |
|----------|-------|
| Solution ID | sk168672 |
| Date Created | 2020-08-23 |
| Last Modified | 2020-11-01 |
| Technical Level | Advanced |
| Products | Security Management Server |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- Policy installation on R77.X Security Gateway fails with many syntax error in /opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/\*.def files, for example:  

`
"/opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/asm_dynamic_props.def", line 42: ERROR: cannot find...`  
`
"/opt/CPmds-R80/customers/cma_nameCPR77CMP-R80/lib/asm_dynamic_props.def", line 97: ERROR: cannot find...`  
`
"/opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/base.def", line 518: ERROR: unknown macro or function...`  
`
"/opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/base.def", line 539: ERROR: syntax error&R77CMP...`  
`
"/opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/base.def", line 557: ERROR: syntax error&R77CMP...`  
`
"/opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/base.def", line 619: ERROR: unknown macro or function...`  
`
"/opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/crypt.def", line 63: ERROR: unknown macro or function...`  
`
"/opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/crypt.def", line 240: ERROR: unknown macro or function...`  
`
"/opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/crypt.def", line 252: ERROR: unknown macro or function...`  
`
"/opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/base.def", line 688: ERROR: unknown macro or function...`  
`
"/opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/base.def", line 741: ERROR: unknown macro or function...`  
`
"/opt/CPmds-R80/customers/cma_name/CPR77CMP-R80/lib/base.def", line 772: ERROR: unknown macro or function...`

## Cause

In R80.10 Security Management there is a IPS purge mechanism (since R80.10 Jumbo HFA take 42, refer to [sk120573](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120573))  

In a rare scenario, this script can delete important files from a table in Postgres which contain the data for an old IPS package. This causes the policy installation to fail.  

<br />

To validate if an IPS package which had been incorrectly purged is the source for the policy failure, follow these steps:  

- *$MDS_FWDIR/scripts/cpm_debug.sh -c FwmSvcImpl -s DEBUG*  
- Install Policy  
- open the CPM logs at *$MDS_FWDIR/log/cpm.elg
-* Search for *object_updates_634.C* string and copy the UID which corresponds for this file, for example:  

INFO coresvc.internal.FileSvcImpl \[unboundedTaskExecutor-16\]: Downloading file **f6274f5a-60fb-44c4-93fc-f7c04f1502fd**   

DEBUG coresvc.internal.FileSvcImpl \[unboundedTaskExecutor-16\]: Target path: /opt/CPmds-R80/customers/jp-mgmt02/CPsuite-R80/fw1/conf/**object_updates_634.C**  
- Using MGMT DB, run (UID is based on the above logs):  

*cpm=# select largeobjoid from internalfile where objid='f6274f5a-60fb-44c4-93fc-f7c04f1502fd';*  
*cpm=# select count from pg_largeobject where loid='4458830';*   

- If the result is **zero, the package had been purged**

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content