> Source: [sk175453](https://support.checkpoint.com/results/sk/sk175453)

# sk175453 - "Snort update failed" error when importing a SNORT rule

| Property | Value |
|----------|-------|
| Solution ID | sk175453 |
| Date Created | 2021-09-14 |
| Last Modified | 2021-10-06 |
| Technical Level | General |
| Products | Security Gateway, Multi-Domain Security Management Server |
| Versions | R81.10 (EOS), R81 (EOS), R81 (EOS), R81.10 (EOS) |
| OS | Gaia |

## Symptoms

- * "`Snort update failed`" error in SmartConsole, when importing this SNORT rule:

      
      alert tcp any 443 <- any any (msg:"Possible exploit_1"; content:"|90|";)

* Using the SnortConvertor tool through the CLI also fails to convert.

      
      [Expert@Hostname:0]# SnortConvertor update -f snort_test_rules.rules --dry-run
      0/1 rules were successfully converted, total of 0 IPS protections were found.
      For more details please see $FWDIR/log/SnortConvertor.elg file.
      Running in Dry Run mode, therefore no changes were actually made.

* Logs in '`$FWDIR/log/cpm.elg`' show that there is an issue with finding a specific file:

  ```
  
  
  `20/07/21 10:36:52,497  INFO services.internal.SnortProtectionsSvcImpl [taskExecutor-24]: getFwDirConfPath: $MDS_FWDIR path: /opt/CPsuite-R80.40/fw1
  20/07/21 10:36:52,512  INFO coresvc.internal.FileSvcImpl [taskExecutor-24]: Downloading file d88158ab-8467-40bb-ad98-6c93dc62b2d8
  20/07/21 10:36:52,513  WARN coresvc.internal.ObjectStoreJpaTransactionManager [taskExecutor-24]: rolling back the transaction. stack trace:
  ...
  20/07/21 10:36:52,513 ERROR services.internal.SnortProtectionsSvcImpl [taskExecutor-24]: Failed to run Snort Update. 
  CpmGeneralException{base='com.checkpoint.management.is.exceptions.CpmGeneralException', errorCode='CP_ERR_FILE_NOT_FOUND', 
  errorFamily='Can't find file with ID: d88158ab-8467-40bb-ad98-6c93dc62b2d8', messageForUser='null', message='null'}
  	at com.checkpoint.management.dleserver.coresvc.internal.FileSvcImpl.downloadFile_aroundBody12(FileSvcImpl.java:22)
  	at com.checkpoint.management.dleserver.coresvc.internal.FileSvcImpl$AjcClosure13.run(FileSvcImpl.java:1)
  	at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
  	at com.checkpoint.management.ngm_mgmt_aspects.PerformanceTestAspect.aroundPerformanceTest(PerformanceTestAspect.java:21)
  ...`
  
  ```

## Cause

There are missing files in the database.

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.   
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.   
For faster resolution and verification please collect [CPinfo](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739) files from the Security Management and Security Gateways involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content