topic Deploying Check Point VMSS in R80.30 in Cloud Firewall

Deploying Check Point VMSS in R80.30

zaarshama — Tue, 15 Dec 2020 22:40:47 GMT

Hi All,

I am trying to deploy Check Point VMSS.

autoprov_cfg init Azure -mn XXXXXXX -tn XXXXXXX -otp XXXXXXX -ver R80.30 -po XXXXXXX -cn XXXXXXX -sb XXXXXXX -at XXXXXXX -aci XXXXXXX -acs "XXXXXXX"

The two instances are up and running in Microsoft Azure however when I try to add them to CMA(which is running on MDS 5050-R80.30 on prem)

I get the following error.

tail -F /var/log/CPcme/cme.log

2020-12-15 22:00:14,109 CME_SERVICE INFO ********** Starting loop iteration number 4 for gateway instances **********

2020-12-15 22:00:14,109 CME_SERVICE INFO The management runs in a MDS environment, and the domain server is XXXXXXX

2020-12-15 22:00:14,435 CME_SERVICE INFO There are no gateways known by the management at the beginning of the iteration

2020-12-15 22:00:18,920 CME_SERVICE ERROR Error during gateways synchronization

2020-12-15 22:00:18,923 CME_SERVICE ERROR Error details: Traceback (most recent call last):

File "/opt/CPcme/service/cme_service.py", line 342, in loop

sync(c, management, gateways)

File "/opt/CPcme/service/cme_service.py", line 242, in sync

if controller.filter_instances():

File "/opt/CPcme/cloud_handlers/cloud_common_handler.py", line 646, in filter_instances

for i in self.get_instances():

File "/opt/CPcme/cloud_handlers/azure_handler.py", line 648, in get_instances

instances += self.get_vmss(subnets)

File "/opt/CPcme/cloud_handlers/azure_handler.py", line 557, in get_vmss

int(subnets[config['subnet']['id']]['properties'][

KeyError: '/subscriptions/XXXXXXX/resourceGroups/XXXXXXX/providers/Microsoft.Network/virtualNetworks/XXXXXXX/subnets/XXXXXXX'

2020-12-15 22:00:18,923 CME_SERVICE INFO

2020-12-15 22:00:18,980 CME_SERVICE INFO There are no gateways known by the management at the end of the iteration

2020-12-15 22:00:18,981 CME_SERVICE INFO ********** End of the iteration number 4 for gateway instances. Iteration time: 0:00:04.871107 **********

2020-12-15 22:00:18,981 CME_SERVICE INFO

Tried to google it but haven't found any information about this particular error.

Any help will be greatly appreciated.

Kind Regards

Zaarshama

Re: Deploying Check Point VMSS in R80.30

Dmitry_Gorn — Tue, 22 Dec 2020 18:33:55 GMT

Hi,

This resembles an old cosmetic bug that was fixed in the latest version of CME.

Please update CME to version 126 according to these instructions, and let me know if the issue still exists.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk157492&partition=Advanced&product=CloudGuard#Installation%20Instructions

Thanks,

Dmitry

Re: Deploying Check Point VMSS in R80.30

zaarshama — Mon, 28 Dec 2020 21:00:51 GMT

Hi Dmitry,

Thanks for your reply, we are already running CME take 126.

Kind Regards

Zaarshama

Re: Deploying Check Point VMSS in R80.30

Dmitry_Gorn — Tue, 29 Dec 2020 08:04:41 GMT

Thanks Zaarshama.

Can you please open a support ticket for this issue and share the SR# here so we can check the root cause?

Thanks,

Dmitry

Re: Deploying Check Point VMSS in R80.30

asalamatov — Thu, 24 Jun 2021 16:44:04 GMT

Is there any solution for this? We are facing same issue. CME ver 138

Re: Deploying Check Point VMSS in R80.30

Dmitry_Gorn — Sun, 27 Jun 2021 09:53:32 GMT

Hi,

Can you please open an SR and share the SR # here so we can follow up on that?

Thanks