topic Re: Smart 1-delete cluster in Portal

Smart 1-delete cluster

RamiShahar — Mon, 01 May 2023 18:44:05 GMT

Hi all,

I have 2 questions regarding Smart 1

1 ) Cluster object-I removed the GW's from the smart 1 webUI but when trying to delete the cluster from the smart console i get this error "failed to delete the object-Unknown error"

Since I don't have a GUI DB edit, is there a way to overcome the error and delete this cluster object?

2) when trying to send api from smart 1 management to the gw (through GAIA api) I get this error on the gw.

I use read and write mode.

Management sends traffic to the GW.

Is there another GW configuration to check?

API :

//https://{{smart1-server}}/web_api/v1.7/gaia-api/show-routes

Body :

{

"target" : "fw_9.191"

}

Response :

{

"code": "err_gaia_api_send_command_failed",

"message": "Cannot send the command to the gateway: fw_9.191 "

}

Re: Smart 1-delete cluster

the_rock — Mon, 01 May 2023 21:16:37 GMT

When you say deleted cluster from smart-1 web UI, not sure what exactly you mean by that? You canNOT delete any object from web UI, only smart dashboard or Guidbedit.

You can try below as far as API:

https://sc1.checkpoint.com/documents/latest/APIs/#cli/delete-simple-cluster~v1.9%20

Andy

Re: Smart 1-delete cluster

RamiShahar — Tue, 02 May 2023 06:56:29 GMT

HI,

I mean by webUI = smart 1 portal (remove connection)

and then in the smart console failed to delete

The delete-simple-cluster API

Doesnt solve it for me..still an error

{

"code": "generic_error",

"message": "Runtime error: Could not commit JPA transaction; nested exception is javax.persistence.RollbackException: Transaction rolled back because transaction was set to RollbackOnly."

}

Re: Smart 1-delete cluster

Hugo_vd_Kooij — Tue, 02 May 2023 08:07:18 GMT

I would start by getting the full detials fthrough the API of that object. See if anything stands out as having a wrong relation.

You may have to chnage that first and then delete the object.

Re: Smart 1-delete cluster

the_rock — Tue, 02 May 2023 11:41:33 GMT

Ok, I see what you mean, deleting from S1C portal, got it. Well, sadly, that wont do much, has to be done from actual smart console. Btw, you CAN get to guidbedit from S1C, I will send you screenshot later how, its super easy.

Andy

Re: Smart 1-delete cluster

RamiShahar — Tue, 02 May 2023 12:14:59 GMT

yes just saw it also, still cant delete it from there also

added pic's from db

Re: Smart 1-delete cluster

the_rock — Tue, 02 May 2023 12:28:58 GMT

That 1st screenshot is what is preventing you, as it appears to suggest there is some sort of network associated with it. I cant say for sure what it could be unless I saw it for myself.

Andy

Re: Smart 1-delete cluster

RamiShahar — Thu, 04 May 2023 18:17:44 GMT

Succeeds to delete the object!! Thx!

Now I have no idea why my API doesn't work

I am using the management api login command

https://{{Smart1_server_name}}/web_api/login

After that I save the sid as the X-chkp-sid variable

Then I run the show asset \ show routes \ show interfaces to the GW and receive status : 500.

https://{{smart1_Servername}}/web_api/gaia-api/show-asset

With the body

{

"target" : "fw_name"

}

And this is the response.

{

"code": "err_gaia_api_send_command_failed",

"message": "Cannot send the command to the gateway: fw_name "

}

Other commands in the management API work fine (like show hosts etc...)-only the GAIA api through the management API not

I can see in the smart console that traffic on port 443\TCP is allow

I use read and write user permission

Any ideas?

Re: Smart 1-delete cluster

PhoneBoy — Thu, 04 May 2023 19:34:25 GMT

https://{{smart1_Servername}}/web_api/gaia-api/show-asset is not a valid API endpoint.
To use the Gaia API, you authenticate to the gateway directly (not through your Smart-1).
See: https://sc1.checkpoint.com/documents/latest/GaiaAPIs/index.html#web/login~v1.7%20

Re: Smart 1-delete cluster

RamiShahar — Fri, 05 May 2023 16:51:07 GMT

Thx for the response

Isnt the smart 1 a management system like cma or smc and executes the same management api commands ?

I’m using the management API as the pic below.

https://sc1.checkpoint.com/documents/latest/APIs/?#web/gaia-api~v1.7%20

As far as for SMC or CMA this api from the management service to the GW is used to work.

Taking a look at this, it appears that it is supposed to support it no ?

API SMART 1

Am I missing something ?

Re: Smart 1-delete cluster

sakeleo213 — Sun, 07 May 2023 23:19:53 GMT

When you say deleted cluster from smart-1 web UI, not sure what exactly you mean by that? You canNOT delete any object from web UI, only smart dashboard or Guidbedit.

GTA 5 Apk OBB

Re: Smart 1-delete cluster

the_rock — Fri, 05 May 2023 22:09:25 GMT

I already made that exact comment lol. He meant delete it from S1C portal, which is totally different than removing it from smart dashboard.

Andy

Re: Smart 1-delete cluster

PhoneBoy — Fri, 05 May 2023 22:57:05 GMT

When you say Smart-1 Management system, what precise hardware are you referring to?
Or are you referring to Smart-1 Cloud?

I forgot you can chain commands through the management like this.
Is there a rule permitting HTTPS traffic between the management server and gateway on port 443?
Did you change the platform portal port to something other than port 443?

Re: Smart 1-delete cluster

RamiShahar — Sat, 06 May 2023 17:04:56 GMT

referring to Smart-1 Cloud

there is a rule permitting HTTPS traffic i even can see in the logs its accept the traffic to the gateway

didn't change the platform portal port from 443 tcp.

is there any specific log I can view in the GW ?

Re: Smart 1-delete cluster

PhoneBoy — Mon, 08 May 2023 17:16:36 GMT

Possible this isn't supported (or is broken with) Smart-1 Cloud.
Please open a TAC case on this issue: https://help.checkpoint.com.

Re: Smart 1-delete cluster

the_rock — Mon, 08 May 2023 17:54:39 GMT

I dont know if its supported, but it does work. I had done it for customer before.

Andy

Re: Smart 1-delete cluster

RamiShahar — Tue, 09 May 2023 19:06:53 GMT

Thx all for the reply. I will open a TAC

I also know it works as I used it 3 months ago

Re: Smart 1-delete cluster

the_rock — Tue, 09 May 2023 19:10:29 GMT

Keep us posted.

Andy