> Source: [sk170433](https://support.checkpoint.com/results/sk/sk170433)

# sk170433 - Web portal for a specific Software Blade does not load after VSX Gateway / VSX Cluster upgrade

| Property | Value |
|----------|-------|
| Solution ID | sk170433 |
| Date Created | 2020-11-11 |
| Last Modified | 2025-05-18 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * Web portal for a specific Software Blade or for all Software Blades does not load after an upgrade of the VSX Gateway / VSX Cluster Members.

* The "`top`" command shows a zombie httpd process (if the web portals are enabled in more than one Virtual System object).

## Cause

The script responsible for HTTPS portal registration on a VSX Gateway / VSX Cluster Member did not run properly.

## Solution

This problem was fixed. The fix is included starting from:

* [Check Point R82](https://support.checkpoint.com/results/sk/sk181127)

Check Point recommends to always upgrade to the [Recommended version](https://support.checkpoint.com/results/sk/sk95746) ([Security Gateway](https://support.checkpoint.com/product/73) / [VSX](https://support.checkpoint.com/product/359) / [Security Management Server](https://support.checkpoint.com/product/184) / [Multi-Domain Security Management Server](https://support.checkpoint.com/product/166) / [SmartConsole](https://support.checkpoint.com/product/191)).

<br />

**For versions R81.20 and lower, follow the workaround steps below.**

If the issue involves only the NAC portal:
> **Note** - This procedure has low risk for the production environment. No maintenance window is required because the affected components are mostly related to the NAC portal.
>
> 1. Connect to the command line on the VSX Gateway / **each** VSX Cluster Member.
>
> 2. Log in.
>
> 3. If the default shell is Gaia Clish, go to the Expert mode:
>
>    `expert`
> 4. Navigate to the context of the relevant Virtual System:
>
>    `vsenv <ID>`
>
>    Note - To see the IDs, run: `vsx stat -l`
> 5. Modify the `$CPDIR/tmp/.CPprofile.sh` file:
>
>    1. Back up the current `$CPDIR/tmp/.CPprofile.sh` file:
>
>       `cp $CPDIR/tmp/.CPprofile.sh{,_BKP}`
>    2. Edit the current `$CPDIR/tmp/.CPprofile.sh` file:
>
>       `vi $CPDIR/tmp/.CPprofile.sh`
>    3. Add this line at the end of the file:
>
>       **Important** - Make sure the correct Virtual System Context is defined. If the line already appears correctly at the end of the file, do **not** change it.
>
>       `export NACPORTAL_HOME=/opt/CPNacPortal/CTX/<Virtual System Context directory - for example, CTX00005>`
>    4. Save the changes in the file and exit Vi editor.
>
> 6. Navigate to the context of the VSX Gateway / VSX Cluster Member (VS0):
>
>    `vsenv 0`
> 7. Navigate to this directory:
>
>    `cd /opt/CPsuite-R<version>/fw1/nacportal/wrapper/script`
> 8. Run the `nacportal_post_install` script with the correct Virtual System Context as the parameter (for example, `CTX00005`):
>
>    `./nacportal_post_install.sh /CTX/CTX00005`
> 9. Restart the portal:
>
>    `mpclient stop nac`
>
>    `mpclient start nac`
> 10. In SmartConsole, install the Access Control policy on the relevant Virtual System.

If the issue involves the NAC portal and other portals:
> 1. Connect to the command line on the VSX Gateway / **each** VSX Cluster Member.
>
> 2. Log in.
>
> 3. If the default shell is Gaia Clish, go to the Expert mode:
>
>    `expert`
> 4. Navigate to the context of the VSX Gateway / VSX Cluster Member (VS0):
>
>    `vsenv 0`
> 5. Run the registration script:
>
>    `$FWDIR/scripts/vsx_post_install_hook.sh`
> 6. Stop all HTTPS portals:
>
>    `mpclient stopall`
> 7. Restart the HTTPS portals with these two commands:
>
>    `cpwd_admin start -name MPDAEMON -path "$CPDIR/bin/mpdaemon" -command "mpdaemon $CPDIR/log/mpdaemon.elg $CPDIR/conf/mpdaemon.conf"`
>
>    `mpclient startall`
> 8. In SmartConsole, install the Access Control policy on each Virtual System.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content