https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152147#M1057 <P>I need some support on restoring a management node on AWS (EC2) which seems to have revoked a certificate and blocking Smartconsole access. Also seems to be non-responsive from the active firewall cluster (two nodes) - both ec2 and pem key is refused by the management node.</P><P>Can I get all of the active rules and configurations from the active firewall nodes?&nbsp; In a format which will allow me to rebuild a cluster and add all of the rules?&nbsp; even if copying them manually?</P><P>Any other suggestions for recovery without bringing down the production firewall cluster which seems to be functional still?</P><P>Help <span class="lia-unicode-emoji" title=":confused_face:">😕</span></P><P>Roy Long</P> Thu, 30 Jun 2022 19:52:51 GMT Roy_Long 2022-06-30T19:52:51Z https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152147#M1057 <P>I need some support on restoring a management node on AWS (EC2) which seems to have revoked a certificate and blocking Smartconsole access. Also seems to be non-responsive from the active firewall cluster (two nodes) - both ec2 and pem key is refused by the management node.</P><P>Can I get all of the active rules and configurations from the active firewall nodes?&nbsp; In a format which will allow me to rebuild a cluster and add all of the rules?&nbsp; even if copying them manually?</P><P>Any other suggestions for recovery without bringing down the production firewall cluster which seems to be functional still?</P><P>Help <span class="lia-unicode-emoji" title=":confused_face:">😕</span></P><P>Roy Long</P> Thu, 30 Jun 2022 19:52:51 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152147#M1057 Roy_Long 2022-06-30T19:52:51Z https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152153#M1058 <P>Would you mind list all the steps that were tried so far?</P> Fri, 01 Jul 2022 00:09:04 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152153#M1058 the_rock 2022-07-01T00:09:04Z https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152165#M1059 <P>You can only open a TAC case and let CP have a look - sometimes such a thing maybe even possible. But: no backup no pity <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Fri, 01 Jul 2022 07:57:34 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152165#M1059 G_W_Albrecht 2022-07-01T07:57:34Z https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152169#M1060 <P>Thanks for the response. We have backups but CP not helping and passed us to AWS to resolve ...</P> Fri, 01 Jul 2022 09:12:03 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152169#M1060 Roy_Long 2022-07-01T09:12:03Z https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152170#M1061 <P>I will comment and summarise when I get some time - right in the middle of it at the moment.</P> Fri, 01 Jul 2022 09:12:30 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152170#M1061 Roy_Long 2022-07-01T09:12:30Z https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152191#M1062 <P>What precise backups were taken from the management?<BR />If you have an appropriate backup (a migrate_server export), you can rebuild the management with rules intact and push policy.</P> <P>If you don’t have an appropriate backup, getting the data from the active gateway requires Professional Services assistance as there’s no easy way to recover it.&nbsp;</P> Fri, 01 Jul 2022 15:04:24 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152191#M1062 PhoneBoy 2022-07-01T15:04:24Z https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152203#M1063 <P>Thanks for your response, I have resolved the issue without any checkpoint assistance <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P>Shutdown the management node, detached the volume, and re-attached to another ec2 instance, fixed the issue there, reconnected to the original management node, deleted the excess/failed SICs and created a new SIC.</P><P>Many thanks.</P> Fri, 01 Jul 2022 18:53:41 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Struggling-to-get-Checkpoint-Support-on-this-item-CloudGuard/m-p/152203#M1063 Roy_Long 2022-07-01T18:53:41Z