topic Re: Cluster member shows "disconnect" in SmartView Monitor in Firewall and Security Management

Cluster member shows "disconnect" in SmartView Monitor

AdaCoul — Fri, 11 May 2018 15:16:40 GMT

Hi everyone !

I'm a new user.

Since the morning, I have a problem with one of my firewalls.

I have two firewalls (FW-1 and FW-2) which are in Cluster configuration and managed by two Smart-1 (Smart-1 PRI and Smart-1 SEC). When I go through SmartView Monitor FW-2 status is "disconnected".

What are the reasons and how could I solve the issue ?

Thanks !

Re: Cluster member shows "disconnect" in SmartView Monitor

XavierBens — Fri, 11 May 2018 18:29:30 GMT

OK; first of all: welcome Secondly, please move this message into Appliances and Gaia topics.

Then, you must use ClusterXL (I assume you used it in order to establishe the cluster between your two Security Gateways) commands to understand what is the status ans why there is an error.

Look at sk56202‌ How to troubleshoot failovers in ClusterXL and come again if you didn't find your answer.

Re: Cluster member shows "disconnect" in SmartView Monitor

PhoneBoy — Sat, 12 May 2018 18:32:50 GMT

Not sure users can move their own threads.

That said, I usually will move new threads as I see them.

However, if you want to be sure it happens, just tag me.

Re: Cluster member shows "disconnect" in SmartView Monitor

AdaCoul — Wed, 16 May 2018 15:22:31 GMT

Hi everyone,

I have looked at sk56202‌ How to troubleshoot failovers in ClusterXL.

When I type cphaprob state command on FW-1, it shows "active attention" on FW-1 and "clusterXL inactive or machine is down" on FW-2. But when I type this command on FW-2 it shows "error : localhost is not a firewall-1 module ".

Let me mentioned that the two Security Gateways are in two remote Sites and in a same Cluster.

When I ping another machine from the faulty Security Gateway (FW-2), I get response. But pingfrom another machine to FW-2 doesn't work.

I also try to type cpconfig command and I got message error : cannot get CPDIR from the registy.

Re: Cluster member shows "disconnect" in SmartView Monitor

PhoneBoy — Wed, 16 May 2018 17:04:57 GMT

"Localhost is not a FireWall-1 Module" and "cannot get CPDIR from the registry" points to much larger issues.

TAC may be able to assist here, but I suspect you'll have to rebuild FW-2.

Re: Cluster member shows "disconnect" in SmartView Monitor

AdaCoul — Thu, 24 May 2018 18:29:11 GMT

I contacted TAC and it results that the database and most system files are corrupt. And as you said, FW-2 needs to be rebuilt.

Thank You for your help.