> Source: [sk182670](https://support.checkpoint.com/results/sk/sk182670)

# sk182670 - Security Group Member detaches when Maestro Orchestrator reboots or performs "orchd start"

| Property | Value |
|----------|-------|
| Solution ID | sk182670 |
| Date Created | 2024-09-10 |
| Last Modified | 2024-09-10 |
| Technical Level | General |
| Products | Scalable Platforms |
| Versions | R81.20 |
| OS | Gaia |
| Platform | Maestro Orchestrator |

## Symptoms

- * In a Maestro Dual Member environment, a Security Group Member temporarily detaches when the Maestro Orchestrator reboots or performs "`orchd start`".

* On the Maestro Orchestrator that is *not* going up, the "`orch_stat -l`" command shows the LSP state of the Security Group Member as "`DROP`".

## Cause

When an MHO is going up, there is a grace period of six seconds for the downlinks of the Security Group Members to become active. In certain configurations, it may take longer. This triggers LSP and causes it to detach the Security Group Member until the downlink becomes active. For more information, see [sk182458](https://support.checkpoint.com/results/sk/sk182458).

<br />

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing it.  
For faster resolution and verification, collect these files:

1. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Management Server involved in the case.
2. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Security Gateway / each Cluster Member involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597).
The Hotfix allows you to adjust the grace period. After you install the Hotfix, do these steps:  

1. Run this command in the Expert mode to adjust the grace timer:  
   `orch_gexec -i all -c "/usr/lib/maestrodb/maestrodb.py set_timer downlinks_timer 15 && echo success || echo failed"`  
   The output should like this:

   ```
   1_1:
   success
   1_2:
   success
   2_1:
   success
   2_2:
   success
   ```

2. Run `reboot `or `orchd restart` on the Maestro Orchestrator and ensure that the Security Group Member no longer detaches.  
   **Note**: You might need to adjust the timer to a higher value, depending on the time it takes the downlink to go up. If the downlink takes a long time to go up, there may be a link integrity issue.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content