> Source: [sk185174](https://support.checkpoint.com/results/sk/sk185174)

# sk185174 - Security Management Server failed to update the IPS database

| Property | Value |
|----------|-------|
| Solution ID | sk185174 |
| Date Created | 2026-08-17 |
| Last Modified | 2026-08-24 |
| Technical Level | General |
| Products | Security Management Server |
| Versions | R82.10, R82, R81.20, R82.20 |
| OS | Gaia |
| Platform | 15000, 3000, 7000, 28000, 16000, 26000, 6000, 910 |

## Symptoms

- * You start the download task in SmartConsole with the **Download using Security Management Server** button. The task fails in about 40% of the attempts, with this error: `Failed to update IPS database`. If you try to revert to the previous IPS version, you get the same error.
* The IPS update on the Security Gateway works correctly.
* The Management Server connects successfully to the Check Point cloud servers. The `fwm` debug log shows that the IPS package downloaded successfully. However, the update process ends with a backtrace error:

      [FWM] "CFwmAutoUpdates_MessageThread::SendNgmIpsUpdateMessageActual": Calling NgmIpsUpdateService:sendIpsUpdateMessage with message: Download succeeded. IPS Update in progress...
      Backtrace with 10 levels: [1] 0xf33f37b3 [/opt/CPshrd-R81.20/lib/libComUtils.so] (offset 0xf7b3)

* The CPM debug log shows that a NULL value causes the IPS update to fail:

      DEBUG EclipseLink.converters.JacksonConverter [qtp-<thread-id>]: Convert Json object to Java, object string: ["java.util.ArrayList",
      [["com.checkpoint.objects.ips_classes.dummy.CpmiAsmProtectionExternalInfo",{"_persistence_fetchGroup":null,"dlesession":0,"objId":"<object-id>","checkPointObjId":null,"folder":null,"domainsPreset":null,"permissionPrimitivePresetId":"<preset-id>","readPrimitiveId":"<read-primitive-id>","domainId":"<domain-id>","isOwned":false,"ownedName":"","name":"CVE-2020-36911","type":"asm_protection_external_info","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36911"}]]]
      DEBUG EclipseLink.converters.JacksonConverter [qtp-<thread-id>]: Convert Json object to Java, object string:
      ERROR EclipseLink.converters.JacksonConverter [qtp-<thread-id>]: Failed at conversion to Java object, value:
      WARN coresvc.internal.ObjectStoreJpaTransactionManager [qtp-<thread-id>]: rolling back the transaction. stack trace:
      java.lang.Thread.getStackTrace(Thread.java:1174)
      com.checkpoint.management.dleserver.coresvc.internal.ObjectStoreJpaTransactionManager.doSetRollbackOnly(ObjectStoreJpaTransactionManager.java:236)
      org.springframework.transaction.support.AbstractPlatformTransactionManager.processRollback(AbstractPlatformTransactionManager.java:852)

* The JSON conversion entries in the CPM debug log show that one specific object causes the issue:

      DEBUG management.object_store.ObjectStoreSessionImpl [taskExecutor-<n>]: findByClassAndObjid: type class com.checkpoint.management.ips_classes.dle.db_index_entities.DbIndexSdTopicPerProfileDynamic, objId <object-id>, readonly false
      DEBUG EclipseLink.converters.JacksonConverter [taskExecutor-<n>]: Convert Json object to Java, object string:
      ERROR EclipseLink.converters.JacksonConverter [taskExecutor-<n>]: Failed at conversion to Java object, value:
      WARN coresvc.internal.ObjectStoreJpaTransactionManager [taskExecutor-<n>]: rolling back the transaction. stack trace:
      java.lang.Thread.getStackTrace(Thread.java:1174)

## Cause

In the IPS database index table, one column contained a NULL value. This column must contain a serialized JSON structure. Because the value was NULL, the system could not deserialize the JSON data. This error occurred when the system tried to save the IPS object during the update process.

## Solution

<br />

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing it.  
For faster resolution and verification, collect these files:

1. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Management Server involved in the case.
2. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Security Gateway / each Cluster Member / Security Group involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597).

<br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content