topic Re: Identity collector unstable with error - sk113021 and password is ok in Firewall and Security Management

Identity collector unstable with error - sk113021 and password is ok

Carlos_Jara — Sat, 24 Dec 2022 19:32:02 GMT

Hi,

We are detecting that Identity collector unstable with error - sk113021 and password is ok.

We change the identity collector server keys in the smartconsole (checkpoint cluster), apply policies, and then reconnect. After a few hours the error occurs again (error - sk113021).

Could you help me?

(view in My Videos)

Re: Identity collector unstable with error - sk113021 and password is ok

the_rock — Sat, 24 Dec 2022 00:08:06 GMT

Did you ensure connectivity is there between the server and the fw? Also, is option for "all interfaces" selected as defined in the sk?

Andy

Re: Identity collector unstable with error - sk113021 and password is ok

Carlos_Jara — Sat, 24 Dec 2022 18:14:07 GMT

Hi,

Connectivity between the server and the fw is ok and option for "all interfaces" is selected as defined in the sk.

any other idea?

Re: Identity collector unstable with error - sk113021 and password is ok

Chris_Atkinson — Sat, 24 Dec 2022 21:46:43 GMT

Out of interest which version of identity collector agent is used here?

Re: Identity collector unstable with error - sk113021 and password is ok

Carlos_Jara — Sat, 24 Dec 2022 23:39:15 GMT

We are trying with two servers with this versions --> 81.035 Y 81.040

Re: Identity collector unstable with error - sk113021 and password is ok

the_rock — Sun, 25 Dec 2022 03:25:05 GMT

Can you run pdp idc status and pdp connections idc commands on the firewall?

Re: Identity collector unstable with error - sk113021 and password is ok

Carlos_Jara — Sun, 25 Dec 2022 10:20:40 GMT

Hi,

This is the result!

[Expert@fwcdg02:0]# pdp idc status
Identity Collector IP: 10.192.199.214
Identity Sources:
No information about identity sources

[Expert@fwcdg02:0]# pdp connections idc

Number of IDCollector sessions: 1
------------------------------------------------------------------------------------------------------------
# IP Number of events Shared secret status Last Event
------------------------------------------------------------------------------------------------------------
1 10.192.199.214 46541 Valid No events received in the last hour

(view in My Videos)

I attach you Identity Collector Server Trace (ia_ag*.logs)

Re: Identity collector unstable with error - sk113021 and password is ok

Carlos_Jara — Mon, 26 Dec 2022 18:13:01 GMT

Hi,

SOLVED!!!!

The root problem was on self signed certificate in the cluster, we update de certificate with one valid certificate in "Platform Portal" + Regenerate Keys (Ientity Collector) + Install Policy + Trust new certificate in Ientity Collector Server ... and finaly it's WORKS.

Many thank's for your help!