topic Re: Gateway recovery in Firewall and Security Management

Gateway recovery

civoulkidis — Wed, 26 Jan 2022 09:43:33 GMT

Hi,

I have lost communication with one remote gateway and I need to be prepared for any situation.

6 months before this gateway crashed and Checkpoint representative re-installed the Gateway from scratch (backup was not available).

What I have :

Gaia System Backup
Snapshot

Before any action I would like to collect logs (if possible) in order to investigate the root cause.

Is there any action plan that I could read in order to restore the Gateway from total corruption?

Can I use the snapshot If the Gaia is not loading?

Re: Gateway recovery

Chris_Atkinson — Wed, 26 Jan 2022 09:58:20 GMT

Gathering Cpinfo & hwdiag for analysis by TAC will be a start (failure dependent), do you have LOM access to the gateway?

Re: Gateway recovery

civoulkidis — Wed, 26 Jan 2022 10:10:01 GMT

The Gateway is an SG3100

Check Point 3100 Security Gateway Datasheet

Only RJ45 and usb ports are available.

Re: Gateway recovery

Chris_Atkinson — Wed, 26 Jan 2022 10:13:07 GMT

So you will need to access the console and asses from there.

Do you have a spare device at your disposal, is this gateway part of a cluster?

Re: Gateway recovery

civoulkidis — Wed, 26 Jan 2022 10:28:42 GMT

This a single Gateway in a remote location.

I will go tomorrow and I want to be prepared and have together anything I need.

As I understand, I need to have my laptop device and an RJ45 cable to connect to the console port.

Re: Gateway recovery

Chris_Atkinson — Wed, 26 Jan 2022 10:47:59 GMT

I would probably also have 2 USB keys handy.

One built with isomorphic blink / iso image aligned to your current version and one for hwdiag logs if needed.

Re: Gateway recovery

the_rock — Wed, 26 Jan 2022 14:33:37 GMT

So you totally lost remote access to that device? If so, @Chris_Atkinson gave you good suggestions. Since you have backup, unless someone can access it locally, they can restore the config.

Re: Gateway recovery

civoulkidis — Wed, 26 Jan 2022 16:31:25 GMT

I am preparing a usb with ISOmorphic tool.

Which configuration type should I use:

Manual, Basic or Advanced?

How to install SecurePlatform / Gaia from a USB device on Check Point appliance and Open Servers using ISOmorphic Tool