topic Re: CloudGuard IaaS "no gateways found" when installing a policy. in Firewall and Security Management

CloudGuard IaaS "no gateways found" when installing a policy.

albertcollcm — Thu, 24 Feb 2022 10:05:11 GMT

Hi,

I've just installed CloudGuard IaaS R81 on a NSX-T V3.1 test lab. I have a Gateway deployed into an ESXi host whose status is OK at both the SmartConsole and the NSX-T Manager.

From the SmartConsole, when I attempt to install a new policy, the message "no gateways found" is returned. I guess that the Gateway, despite of looking good, must possibly need to be enabled somewhere else prior to install policies on it.

Regards in advance.

Albert.

Re: CloudGuard IaaS "no gateways found" when installing a policy.

PhoneBoy — Mon, 28 Feb 2022 00:17:58 GMT

Sees to suggest CME isn't creating the necessary objects.
What does /var/log/CPcme/cme.log say on the management?

Re: CloudGuard IaaS "no gateways found" when installing a policy.

albertcollcm — Wed, 02 Mar 2022 07:32:20 GMT

Hi,

Thanks for your help. The /var/log/CPcme/cme.log file presents this recurring pattern:

2022-03-02 08:23:40,384 CME_SERVICE INFO run_local Executing: /sbin/ifconfig `dbget management:interface` | grep 'inet addr:' | cut -d: -f2 | awk '{ printf $1}' with:
data=None
env=None
2022-03-02 08:23:40,407 CME_SERVICE INFO Return code= 0
Output=10.206.122.125
2022-03-02 08:23:40,511 CME_SERVICE INFO Found a service manager: CP_RegularDomain_598423
2022-03-02 08:23:41,053 CME_SERVICE INFO Found service CP_My_cloudguard_1_1 deployed
2022-03-02 08:23:41,138 CME_SERVICE INFO The gateways found in controller CTL5 are:
2022-03-02 08:23:41,138 CME_SERVICE INFO 1: CTL5--CP_My_cloudguard_1_1
2022-03-02 08:23:41,139 CME_SERVICE INFO
2022-03-02 08:23:44,142 CME_SERVICE INFO SIC port is not yet open between management localhost and gateway CTL5--CP_My_cloudguard_1_1.
2022-03-02 08:23:44,143 CME_SERVICE INFO CME Service will retry to connect later
2022-03-02 08:23:44,143 CME_SERVICE INFO CTL5--CP_My_cloudguard_1_1 state is changed to: INITIALIZING
2022-03-02 08:23:44,143 CME_SERVICE INFO
2022-03-02 08:23:44,209 CME_SERVICE INFO There are no gateways known by the management at the end of the iteration
2022-03-02 08:23:44,210 CME_SERVICE INFO ********** End of the iteration number 30005 for gateway instances. Iteration time: 0:00:05.953549 **********

I guess that I should troubleshoot SIC issues...

Regards.

Re: CloudGuard IaaS "no gateways found" when installing a policy.

PhoneBoy — Wed, 02 Mar 2022 15:33:37 GMT

Did you check the items mentioned in this SK?
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk163536