> Source: [sk181633](https://support.checkpoint.com/results/sk/sk181633)

# sk181633 - Threat Emulation update fails with Java error: "Error: Threat Emulation update failed, cannot download Java Package. Failed running download process."

| Property | Value |
|----------|-------|
| Solution ID | sk181633 |
| Date Created | 2023-11-20 |
| Last Modified | 2025-10-10 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81.20 |

## Symptoms

- * Threat Emulation update fails with Java error:

  "*Error: Threat Emulation update failed, cannot download Java Package. Failed running download process.*".
* Confirmed connectivity from the Security Gateway to Check Point servers as described in [sk83520](https://support.checkpoint.com/results/sk/sk83520).

* The *$FWDIR/log/te_file_downloader.elg* log file on the Security Gateway contains these lines:

  `[<PID TID>]GW-NAME[DATE] [TE (TD::Important)] main_te_fileDownloader: all arguments are valid: file type: te_java, version: gulliver, UID: 515bfdd7-1d15-4d41-878f-8dee7c23008b, revision: 174, hash: 212466524, maxDownloadSpeedInBytes: 0, destination directory: /var/log/files_repository/Java/515bfdd7-1d15-4d41-878f-8dee7c23008b/174, proxy address: , porxy port: 0`  
  `
  [<PID TID>]GW-NAME[DATE] [TE (TD::Important)] main_te_fileDownloader: proxy address string is:()`  
  `
  [<PID TID>]GW-NAME[DATE] [TE (TD::All)] te::AttributeReader::AttributeObjectHandlerString::FetchAttribute: Failed to read attribute data, can't find value for attribute: download_center_path in attributes object, this might indicate that this attribute was not set yet`  
  `
  [<PID TID>]GW-NAME[DATE] [NOTICE] http_client_create: CURL initialized successfully.`  
  `
  [<PID TID>]GW-NAME[DATE] [NOTICE] http_client_create: curl init finished successfully`  
  `
  [<PID TID>]GW-NAME[DATE] [NOTICE] FDTparser_create: FDTParser created succesfully.`  
  `
  [<PID TID>]GW-NAME[DATE] http_client_set_opts: set proxy to `  
  `
  [<PID TID>]GW-NAME[DATE] FDT_tderror_hide_password: called from create_info_soap`  
  `
  [<PID TID>]GW-NAME[DATE] FDT_tderror_hide_password: invalid arguments`  
  `
  [<PID TID>]GW-NAME[DATE] assert_ca_bundle_path: CA bundle path is "/opt/CPshrd-R81.20/conf/ca-bundle.crt"`  
  `
  [<PID TID>]GW-NAME[DATE] [NOTICE] http_client_get_imp: Before performing POST operation. url=https://updates.checkpoint.com/WebService/services/DownloadMetaDataService. cert path=/opt/CPshrd-R81.20/conf/ca-bundle.crt`  
  `
  [<PID TID>]GW-NAME[DATE] [INFO] http_client_handle_finished_download: HTTP code=200. Error String:No error`  
  `
  Error Buffer=<NULL>`  
  `
  `
* Running this command on the Security Gateway shows that the Java revision is empty (0.0 Bytes):

  *tecli show downloads java*

## Cause

Java revision is corrupted.

## Solution

1. Confirm current java revision package. Run:  
   `tecli show downloads java`
2. Delete problematic revision. Run:
   1. `cd /var/log/files_repository/Java/<UID Number according to the step above>`
   2. `ls -lha`  
      This should show the same revision number from "`tecli show downloads java`"
   3. `rm -rf REVISION NUMBER`  
      For example: `rm -rf 174`
3. Restart TED. Run:  
   `fw kill ted`
4. Update TED. Run:  
   `tecli advanced download update all`
5. Wait a few minutes for the file to be redownloaded.
6. Confirm again. Run:   
   `tecli show downloads java`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content