Cloud -AWS cannot establish SIC with the Security Gateway From My On-Prem

RoyA — Wed, 14 Jun 2023 14:22:33 GMT

hello Cloud Mates

We are trying to crate SIC with CME tool from my local (on-prem) SMS to CloudGuard Network Auto-Scaling of AWS Cloud,

when we test cme by command "service cme test" I get the next error:

"Controller TEST failed certificate verify failed self signed certificate in certificate chain"

and from the /var/log/cme.log I get the next error:

"OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to ec2.eu-west"

Upload photo as will

follow by process troubleshooting https://sc1.checkpoint.com/documents/IaaS/WebAdminGuides/EN/CP_CME/Content/Topics-CME/Troubleshooting.htm CME script tell it connect establish Error Code: certificate verify failed by review the cme.log we see error: Controller TEST failed certificate verify failed self signed certificate in certificate chain from the Management to my CloudGuard

from what I understand I need to create trust certificate on the Management server because I have Proxy server between them,

now for my question is what kind of certificate I should install on the management server in order to solve this issue.

and how can I make import inside of the management server?

R80.40

thank you all!

Re: Cloud -AWS cannot establish SIC with the Security Gateway From My On-Prem

PhoneBoy — Wed, 14 Jun 2023 18:59:00 GMT

I presume the issue is SIC is not trusting the proxy or similar.
In any case, I recommend a TAC case: https://help.checkpoint.com