topic Re: after upgrade cluster member shows as disconnected in Cloud Firewall

after upgrade cluster member shows as disconnected

flachance — Thu, 13 Oct 2022 19:25:10 GMT

We performed a side by side Azure Cloudguard cluster upgrade. Old cluster was R80.40, new one R81.10

After the upgrade in SmartConsole one of the member shows as if disconnected, but we can reach it and push policy to it. Also in the recommended Jumbo column it shows old R80.40 info.

Not seeing blocked or dropped traffic to it. Any suggestions?

Re: after upgrade cluster member shows as disconnected

the_rock — Thu, 13 Oct 2022 19:35:52 GMT

Never seen that on Azure, but on prem fw and once it got rebooted again, all was fine. Cant really say for sure what would cause it, specially since its a clusster. if you run fw ver or cpinfo -y FW1, does it show correct version/jumbo?

Re: after upgrade cluster member shows as disconnected

flachance — Thu, 13 Oct 2022 19:42:04 GMT

We've rebooted a few times and no changes.

fw ver

This is Check Point's software version R81.10 - Build 006

cpinfo -y FW1

This is Check Point CPinfo Build 914000219 for GAIA
[FW1]
HOTFIX_R80_40_MAAS_TUNNEL_AUTOUPDATE
HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE
HOTFIX_GOT_TPCONF_AUTOUPDATE
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 30

FW1 build number:
This is Check Point's software version R81.10 - Build 006
kernel: R81.10 - Build 008

Re: after upgrade cluster member shows as disconnected

the_rock — Thu, 13 Oct 2022 19:43:58 GMT

K, fair enough. What does it say if you hover the mouse over red X sign?

Andy

Re: after upgrade cluster member shows as disconnected

flachance — Thu, 13 Oct 2022 19:49:32 GMT

Connection with 'atIcGw2' is lost

Re: after upgrade cluster member shows as disconnected

the_rock — Thu, 13 Oct 2022 19:52:31 GMT

K, just an idea. I know this is never recommended during the work hours, but since its broken anyway, are you able to unload policy on it, just to be 100% sure its nothing with policy causing it? Also, Im sure SIC works, as you said you could push policy to it after the upgrade. What does cpwd_admin list show?

Re: after upgrade cluster member shows as disconnected

Chris_Atkinson — Fri, 14 Oct 2022 00:06:21 GMT

Is there a VPN involved?

Have you reviewed sk163076 & sk166495?

Otherwise if the problem persists with a more recent JHF version installed please investigate the issue further with TAC.

Re: after upgrade cluster member shows as disconnected

flachance — Fri, 14 Oct 2022 17:20:05 GMT

sk163076 (rebooting the management server) fixed it. Thanks!