11/23/22, 3:50 PM "Status: General Error" appears when users create a custom feed for a Security Gateway
Support Center > Search Results > SecureKnowledge Details
Search Support Center
"Status: General Error" appears when users create a custom feed for a Security Gateway Te
My Favorites
Solution ID sk177844
Technical Level
Product Anti-Virus
Version All
OS Gaia
Platform / Model All
Date Created 09-Feb-2022
Symptoms
"Status: General Error" appears when users create a custom feed for a Security Gateway in Gaia Expert Mode.
Example of command to configure a custom feed
ioc_feeds add --feed_name URL_SHA1 --transport local_file --resource "/home/admin/ioc_feeds/SHA1.csv" --format [value:1,type:SHA
Example of custom feeds debug:
$FWDIR/bin/ioc_feeder -d -f
#less $FWDIR/log/ioc_feeder.elg
CIOCFeederManger[840] ::run: [ERROR] parsing failed for SHA1 (your feed name)
CIOCFeederManger[953] ::run: [ERROR] ::logFinalStatus: [INFO] logging "External IOC - External Indicators processing failed
The $FWDIR/bin/ioc_feeder -d -f debug file shows:
CIOCFeederManger[840] ::run: [ERROR] parsing failed for SHA1 (your feed name)
CIOCFeederManger[953] ::run: [ERROR] ::logFinalStatus: [INFO] logging "External IOC - External Indicators processing failed
Cause
These are the possible causes:
1. There is no hash value.
2. The file shows an incorrect file format.
Solution
This is not a Check Point issue.
To resolve the issue, make sure the format of the SHA file is consistent.
Example of a file with incorrect file format:
#! DESCRIPTION = ExternalCelsaFeed_Ip
02f0a867831f084a93fc59228531c6b31d6e1aa77e716ae0952103412e124557
567B277A17B5972A46C8B4D953B164A12C9E6105
Example of a file with correct file format:
The format of this file is SHA1, but one or more parameters are equal to SHA256.
Example of a file with correct file format:
#! DESCRIPTION = ExternalCelsaFeed_Ip
567B277A17B5972A46C8B4D953B164A12C9E6105
BFD009F500C057195FFDE66FAE64F92FA5F59B72
Note - Check Point Supports SHA1 and SHA256. To use SHA1 and SHA256, you must upload a separate configuration file for each one.
Related Solution: sk132193 - What is the "Custom Intelligence Feeds" feature?.
This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.
Give us Feedback Please rate this document [1=Worst,5=Best]
Enter your comment here
Comment
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk177844 1/2
11/23/22, 3:50 PM "Status: General Error" appears when users create a custom feed for a Security Gateway
SECURE YOUR EVERYTHING ™ Follow Us
©1994-2022 Check Point Software Technologies Ltd. All rights reserved.
Copyright | Privacy Policy
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk177844 2/2
