> Source: [sk184763](https://support.checkpoint.com/results/sk/sk184763)

# sk184763 - Maestro Security Group in the Traditional VSX mode does not detect link-down events for uplink ports eth1-65 and higher

| Property | Value |
|----------|-------|
| Solution ID | sk184763 |
| Date Created | 2026-03-11 |
| Last Modified | 2026-03-16 |
| Technical Level | General |
| Products | Security Gateway, Scalable Platforms |
| Versions | R82.10, R82, R81.20, R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * When you shut down a switch port that is connected to an uplink port on the Maestro Orchestrator, the Orchestrator correctly shows the status of this uplink port as "Down".

* On the Security Group, in the content of the Virtual System that uses this uplink port, the status of this uplink port still appears as "Up" (for example, the output of "`asg stat vs` still shows the same number of ports").

* In the Security Group, failover does not occur between Virtual Systems.

* This issue occurs only for uplink ports eth1-65 and higher.

## Cause

A behavior in the interface?state synchronization mechanism prevents correct propagation of link?down events for uplink ports eth1-65 and higher.

As a result, the statuses of these ports are not updated correctly in the VSX context.

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue (**requires manual configuration**).

A Support Engineer will make sure the Hotfix is compatible with your environment before providing it.  
For faster resolution and verification, collect these files:

1. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Management Server involved in the case.
2. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Security Group involved in the case.

**Hotfix Installation Procedure**   

1. Install the Hotfix on all Security Group Members and reboot.  
   Refer to [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597) \> section "Installing Hotfixes on Scalable Platforms (ElasticXL, Maestro, Scalable Chassis)".
2. Connect to the command line on the Security Group.
3. Log in to the Expert mode.
4. Add uplink ports from 65 to 99 to the Gaia configuration:  
   `g_all /usr/bin/add_ports_65_99`
5. Make sure interfaces eth1?65 through eth1?99 appear on all Security Group Members:  
   `g_cat /config/active | grep 'interface:eth1' | grep 'state' | sort`
6. In SmartConsole, install Access Control policy on the Security Group object.

**Hotfix Uninstall Procedure**

1. Connect to the command line on the Security Group.
2. Log in to the Expert mode.
3. Remove uplink ports from 65 to 99 from the Gaia configuration:  
   `g_all /usr/bin/remove_ports_65_99`
4. Make sure interfaces eth1?65 through eth1?99 do not appear on all Security Group Members anymore:  
   `g_cat /config/active | grep 'interface:eth1' | grep 'state' | sort`
5. Go from the Expert mode to Gaia gClish.
6. Uninstall the Hotfix and reboot.  
   See the *Scalable Platforms Administration Guide* for your version \> section "Installing and Uninstalling a Hotfix on Security Group Members".

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content