> Source: [sk178144](https://support.checkpoint.com/results/sk/sk178144)

# sk178144 - CloudGuard Controller fails to push NSX-T tags to Security Gateway

| Property | Value |
|----------|-------|
| Solution ID | sk178144 |
| Date Created | 2022-03-08 |
| Last Modified | 2026-04-12 |
| Technical Level | Advanced |
| Products | Cloud Firewall |
| Versions | R81.10 (EOS), R81.20, R82 |
| OS | Gaia |
| Platform | VMWare NSX-T |

## Symptoms

- * CloudGuard Controller fails to push NSX-T tags to Security Gateway.

* Logs from *cloud_proxy.elg* shows that the tags are pushed to the dummy VIP (1.2.3.4) of the cluster object and fails:  

  `
  DATE TIME,XXX ERROR datacenter.util.CommandExec [gateway-updater_XXXXXXXXXXXXXXXXX-1]: Failed to execute '[/opt/CPshrd-R81.10/bin/cprid_util, -server, 1.2.3.4, putfile, -local_file, /opt/CPsuite-R81.10/fw1/tmp/XXXXXXXXXXXXXXXXX-1_vsecUpdate.sh, -remote_file, /tmp/XXXXXXXXXXXXXXXXX-1_vsecUpdate.sh]' from domain`  
  `
  DATE TIME,XXX ERROR datacenter.util.CommandExec [gateway-updater_XXXXXXXXXXXXXXXXX-1]: command: [/opt/CPshrd-R81.10/bin/cprid_util, -server, 1.2.3.4, putfile, -local_file, /opt/CPsuite-R81.10/fw1/tmp/XXXXXXXXXXXXXXXXX-1_vsecUpdate.sh, -remote_file, /tmp/XXXXXXXXXXXXXXXXX-1_vsecUpdate.sh] failed with exit code: 3`  
  `
  DATE TIME,XXX ERROR ida.api.IDACpridRequestSenderClient [gateway-updater_XXXXXXXXXXXXXXXXX-1]: Failure 3/3 to send script file to gateway ip: 1.2.3.4`  
  `
  DATE TIME,XXX ERROR ida.requests.IDARequestsSender [gateway-updater_XXXXXXXXXXXXXXXXX-1]: Error while attempt to connect to server: 1.2.3.4`

* Logs in *CPVED.elg* shows that content of *vcenter_gateways_file.C* ended unexpectedly:  

  `
  [DATE TIME] DEBUG [pool-1-thread-1] (CPVED.java:5) - Got 31 Agents`  
  `
  [DATE TIME] DEBUG [pool-1-thread-1] (FileNameAssist.java:22) - getConfPathConsiderMDS(): return=/opt/CPsuite-R81.10/fw1/conf`  
  `
  [DATE TIME] DEBUG [pool-1-thread-1] (VCentersGatewaysFile.java:30) - instance of file: /opt/CPsuite-R81.10/fw1/conf/vcenter_gateways_file.C
  `  
  `
  [DATE TIME] DEBUG [pool-1-thread-1] (VCentersGatewaysFile.java:9) - initFile(). path=/opt/CPsuite-R81.10/fw1/conf/vcenter_gateways_file.C`  
  `
  [DATE TIME] ERROR [pool-1-thread-1] (veEventsListener.java:125) - PeriodicCBHandler: failed calling callback for eventcom.vmware.vim.eam.agent.created[com.checkpoint.infrastructure.data_structures.FwsetIo$FwsetIoException: /opt/CPsuite-R81.10/fw1/conf/vcenter_gateways_file.C line 179:13,mismatched input '<EOF>' expecting FWSET_CLOSE]`

* The file *$FWDIR/conf/vsec_controller_targets_data.set* contains entries with the dummy VIP 1.2.3.4.

## Cause

Corruption in the *$FWDIR/conf/vcenter_gateways_file.C* file.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content
