> Source: [sk181650](https://support.checkpoint.com/results/sk/sk181650)

# sk181650 - The $FWDIR/../oc_feeder.conf file is empty on all VSs and VSX Gateways

| Property | Value |
|----------|-------|
| Solution ID | sk181650 |
| Date Created | 2023-11-13 |
| Last Modified | 2025-01-16 |
| Technical Level | General |
| Products | Security Gateway, Multi-Domain Security Management Server |
| Versions | R81.20, R81.10 (EOS), R81 (EOS), R81 (EOS), R81.10 (EOS), R81.20 |
| OS | Gaia |
| Platform | Smart-1 |

## Symptoms

- * The *$FWDIR/../oc_feeder.conf* file is empty on all VSs and VSX Gateways.

* Policy installation of Threat Prevention fails with error: "*failing to handle indicators \<\>*".

## Cause

At least one IOC feed is configured in SmartConsole, and no external IOC feeds are configured in CLI. Policy installation was attempted after the last feed was deleted from SmartConsole. If all feeds are deleted, the JSON field "`feeds`" is erased and an empty object is added instead, which is represented as `{ }`.

## Solution

This problem was fixed. The fix is included in:

* [Check Point Quantum R82](https://support.checkpoint.com/results/sk/sk181127)
* [Jumbo Hotfix Accumulator for R81.20](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm) starting from Take 90
* [Jumbo Hotfix Accumulator for R81.10](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10/Default.htm) starting from Take 171
* [Jumbo Hotfix Accumulator for R81](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81/Default.htm) starting from Take 106

If you choose not to upgrade, this workaround is available.  

As a **workaround** , add an external IOC feed through the CLI with `state=false`. The feed only has the effect of not "reaching" an empty tree of feeds:

`ioc_feeds add --feed_name dummyfeed --transport local_file --state false --resource "/home/admin/some_name.csv" --format [value:1,type:ip]`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content
