Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
0% found this document useful (0 votes)
31 views

Status - General Error - Appears When Users Create A Custom Feed For A Security Gateway

Uploaded by

viper0anger
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
31 views

Status - General Error - Appears When Users Create A Custom Feed For A Security Gateway

Uploaded by

viper0anger
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

11/23/22, 3:50 PM "Status: General Error" appears when users create a custom feed for a Security Gateway

Support Center > Search Results > SecureKnowledge Details

Search Support Center

"Status: General Error" appears when users create a custom feed for a Security Gateway Te

My Favorites

Solution ID sk177844

Technical Level

Product Anti-Virus
Version All
OS Gaia
Platform / Model All
Date Created 09-Feb-2022

Symptoms
"Status: General Error" appears when users create a custom feed for a Security Gateway in Gaia Expert Mode.
Example of command to configure a custom feed

ioc_feeds add --feed_name URL_SHA1 --transport local_file --resource "/home/admin/ioc_feeds/SHA1.csv" --format [value:1,type:SHA

Example of custom feeds debug:

$FWDIR/bin/ioc_feeder -d -f

#less $FWDIR/log/ioc_feeder.elg

CIOCFeederManger[840] ::run: [ERROR] parsing failed for SHA1 (your feed name)

CIOCFeederManger[953] ::run: [ERROR] ::logFinalStatus: [INFO] logging "External IOC - External Indicators processing failed

The $FWDIR/bin/ioc_feeder -d -f debug file shows:

CIOCFeederManger[840] ::run: [ERROR] parsing failed for SHA1 (your feed name)

CIOCFeederManger[953] ::run: [ERROR] ::logFinalStatus: [INFO] logging "External IOC - External Indicators processing failed

Cause
These are the possible causes:

1. There is no hash value. 


2. The file shows an incorrect file format.

Solution
This is not a Check Point issue.

To resolve the issue, make sure the format of the SHA file is consistent.

Example of a file with incorrect file format:

#! DESCRIPTION = ExternalCelsaFeed_Ip

02f0a867831f084a93fc59228531c6b31d6e1aa77e716ae0952103412e124557

567B277A17B5972A46C8B4D953B164A12C9E6105

Example of a file with correct file format:

The format of this file is SHA1, but one or more parameters are equal to SHA256.

Example of a file with correct file format:

#! DESCRIPTION = ExternalCelsaFeed_Ip

567B277A17B5972A46C8B4D953B164A12C9E6105

BFD009F500C057195FFDE66FAE64F92FA5F59B72

Note - Check Point Supports SHA1 and SHA256. To use SHA1 and SHA256, you must upload a separate configuration file for each one.

Related Solution: sk132193 - What is the "Custom Intelligence Feeds" feature?.

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Give us Feedback Please rate this document [1=Worst,5=Best]

Enter your comment here


Comment 

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk177844 1/2
11/23/22, 3:50 PM "Status: General Error" appears when users create a custom feed for a Security Gateway

SECURE YOUR EVERYTHING ™ Follow Us    


©1994-2022 Check Point Software Technologies Ltd. All rights reserved.

Copyright | Privacy Policy

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk177844 2/2

You might also like