> Source: [sk183992](https://support.checkpoint.com/results/sk/sk183992)

# sk183992 - Adding SecureXL Rate Limiting rule with with AS numbers  or country codes fails on VSX

| Property | Value |
|----------|-------|
| Solution ID | sk183992 |
| Date Created | 2025-09-30 |
| Last Modified | 2025-12-21 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82, R81.20, R81.10 (EOS) |
| OS | Gaia |

## Symptoms

- * Adding SecureXL Rate Limiting rule on a VSX Gateway with the command: `"fwaccel dos rate add -a b -n fwaccel_dos_rate_bypass"` using AS numbers or country on a Virtual System (VS) other than VS0 fails with error:  

  ```
  
  ERROR: failed to open IpToCountry.csv
  ERROR: failed to open GeoIPASNum2.csv
  ERROR: Bad source 'cc:AT'
  ```

  <br />

* The files *$FWDIR/CTX/CTX0000\<VS_ID\>/conf/IpToCountry.csv* and *$FWDIR/CTX/CTX0000\<VS_ID\>/conf/GeoIPASNum2.csv* do not exist on all VSs.

## Cause

SecureXL Rate Limiting rules for DoS Mitigation fail to handle these parameters on Virtual Systems other than VS0:  
`cc:<COUNTRY_CODE>`  
`asn:<AUTONOMOUS_SYSTEM_NUMBER>`

## Solution

This problem was fixed. The fix is included in:

* [Jumbo Hotfix Accumulator for R81.10](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10/Default.htm) starting from Take 183

If you choose not to upgrade, Check Point can supply a **Hotfix** . [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.  
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.  
For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597).

Make sure that the updatable objects exist on all VSs:

Run this commands on each VS context:

`# unified_dl UPDATE ONLINE_SERVICES`

`# cd $CPDIR/database/downloads/ONLINE_SERVICES/1.0/`

`# ls -al`

Example output:

`total 28`  
`drwx------ 5 admin root 176 Jun 17 11:38 .`  
`drwx------ 3 admin root 17 Jun 5 15:00 ..`  
`drwx------ 2 admin root 4096 Jun 6 01:19 050624211202`  
`drwx------ 2 admin root 4096 Jun 6 07:19 060624031147`  
`drwx------ 2 admin root 4096 Jun 17 11:38 170624091150`  
`-rw-rw---- 1 admin root 113 Jun 17 11:38 Update_Status.dat`  
`-rw-rw---- 1 admin root 111 Jun 17 11:38 last_revision.xml`  
`-rw-rw---- 1 admin root 111 Jun 17 11:38 last_revision_old.xml`  
`-rw-rw---- 1 admin root 41 Jun 17 11:38 tmp_revisions_order.txt`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content