topic Re: Skyline in Firewall and Security Management

Skyline

Simon_Macpherso — Tue, 10 Jan 2023 23:37:43 GMT

Hi, is Maestro (R81.10 JHF79) fully supported in the GA version of Skyline?

If i run a tcpdump on the prometheus server for a few minutes only the following metrics are received.

.__name__..skyline_build_info
.__name__..system_uptime
.__name__..target
.__name__..cpview_info

Regards,

Simon

Re: Skyline

Chris_Atkinson — Wed, 11 Jan 2023 01:03:49 GMT

Received from the SMO, MHO or both?

In a Maestro environment (sk178566):
- For the Maestro Hyperscale Orchestrator (MHO): you can run the script or the Gaia Rest API. The script runs on the MHO and only configures the MHO.
- For a Security Group: Run the script only on the Single Management Object (SMO). The SMO applies it to all the related members of the Security Group.
- If there are issues with the script, try to download it from here and replace it under the /opt/CPotelcol/REST.py file.
- The script uses gexec and g_cp2blades. Make sure they work correctly.

Re: Skyline

Simon_Macpherso — Wed, 11 Jan 2023 01:45:40 GMT

I'm asking if Maestro (both SMO and MHO) are fully supported in the GA release as I'm not received all expected metrics.

@Arik_Ovtracht

Re: Skyline

Arik_Ovtracht — Wed, 11 Jan 2023 11:10:12 GMT

Yes, they are fully supported.

Would it be possible for me to investigate your environment, to get a better understanding of the issue?

You can contact me directly at ariko@checkpoint.com

Re: Skyline

Machhindra — Fri, 27 Jan 2023 12:37:50 GMT

Please share steps for Maestro SMO

Re: Skyline

Vincent_Bacher — Fri, 03 Mar 2023 09:37:14 GMT

@Chris_Atkinson wrote:
For a Security Group: Run the script only on the Single Management Object (SMO). The SMO applies it to all the related members of the Security Group.

I assume this also applies to SP, correct?
thanks
Vincent