Status - General Error - Appears When Users Create A Custom Feed For A Security Gateway
Status - General Error - Appears When Users Create A Custom Feed For A Security Gateway
"Status: General Error" appears when users create a custom feed for a Security Gateway Te
My Favorites
Solution ID sk177844
Technical Level
Product Anti-Virus
Version All
OS Gaia
Platform / Model All
Date Created 09-Feb-2022
Symptoms
"Status: General Error" appears when users create a custom feed for a Security Gateway in Gaia Expert Mode.
Example of command to configure a custom feed
ioc_feeds add --feed_name URL_SHA1 --transport local_file --resource "/home/admin/ioc_feeds/SHA1.csv" --format [value:1,type:SHA
$FWDIR/bin/ioc_feeder -d -f
#less $FWDIR/log/ioc_feeder.elg
CIOCFeederManger[840] ::run: [ERROR] parsing failed for SHA1 (your feed name)
CIOCFeederManger[953] ::run: [ERROR] ::logFinalStatus: [INFO] logging "External IOC - External Indicators processing failed
CIOCFeederManger[840] ::run: [ERROR] parsing failed for SHA1 (your feed name)
CIOCFeederManger[953] ::run: [ERROR] ::logFinalStatus: [INFO] logging "External IOC - External Indicators processing failed
Cause
These are the possible causes:
Solution
This is not a Check Point issue.
To resolve the issue, make sure the format of the SHA file is consistent.
#! DESCRIPTION = ExternalCelsaFeed_Ip
02f0a867831f084a93fc59228531c6b31d6e1aa77e716ae0952103412e124557
567B277A17B5972A46C8B4D953B164A12C9E6105
The format of this file is SHA1, but one or more parameters are equal to SHA256.
#! DESCRIPTION = ExternalCelsaFeed_Ip
567B277A17B5972A46C8B4D953B164A12C9E6105
BFD009F500C057195FFDE66FAE64F92FA5F59B72
Note - Check Point Supports SHA1 and SHA256. To use SHA1 and SHA256, you must upload a separate configuration file for each one.
This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk177844 1/2
11/23/22, 3:50 PM "Status: General Error" appears when users create a custom feed for a Security Gateway
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk177844 2/2