https://community.checkpoint.com/t5/Firewall-and-Security-Management/SIC-certificate-expired/m-p/214027#M40856 <P>Hi:</P><P>Today we realized the SIC certificate expired in 4 out of 3 gateways. In this SK you can read this certificates should be renewed automatically&nbsp;a<SPAN>t the 75% threshold (Scenario 4) (<A href="https://support.checkpoint.com/results/sk/sk97691" target="_blank">https://support.checkpoint.com/results/sk/sk97691</A>). The first thing we thought is the ports were closed but it doesn't seem so. Telnets from SMS to one gateway:</SPAN></P><P><STRONG>[Expert@SMS:0]# telnet 192.168.217.81 18191</STRONG><BR /><STRONG>Trying 192.168.217.81...</STRONG><BR /><STRONG>Connected to 192.168.217.81.</STRONG><BR /><STRONG>Escape character is '^]'.</STRONG></P><P><BR /><STRONG>[Expert@SMS:0]# telnet 192.168.217.81 18192</STRONG><BR /><STRONG>Trying 192.168.217.81...</STRONG><BR /><STRONG>Connected to 192.168.217.81.</STRONG><BR /><STRONG>Escape character is '^]'.</STRONG></P><P>&nbsp;</P><P>There is no connection to the <SPAN>18210 and&nbsp;18211&nbsp;</SPAN>ports because the gateways are not listening on them:</P><P><STRONG>[Expert@Gateway]# netstat -punta | grep 1821</STRONG><BR /><STRONG>[Expert@Gateway]#</STRONG></P><P>&nbsp;</P><P>SMS is R81.20 Take 41, gateways in R81.10 Take 130.</P><P>We'll reset the SIC manually but want to know why the SIC certificates weren't renewed automatically.</P><P>&nbsp;</P><P>P.D. In Global properties &gt; Firewall, Accept control connections option is enabled.</P><P>Any ideas?</P><P>Thanks in advanced</P><P>Regards</P> Mon, 13 May 2024 14:10:48 GMT Franktum 2024-05-13T14:10:48Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SIC-certificate-expired/m-p/214027#M40856 <P>Hi:</P><P>Today we realized the SIC certificate expired in 4 out of 3 gateways. In this SK you can read this certificates should be renewed automatically&nbsp;a<SPAN>t the 75% threshold (Scenario 4) (<A href="https://support.checkpoint.com/results/sk/sk97691" target="_blank">https://support.checkpoint.com/results/sk/sk97691</A>). The first thing we thought is the ports were closed but it doesn't seem so. Telnets from SMS to one gateway:</SPAN></P><P><STRONG>[Expert@SMS:0]# telnet 192.168.217.81 18191</STRONG><BR /><STRONG>Trying 192.168.217.81...</STRONG><BR /><STRONG>Connected to 192.168.217.81.</STRONG><BR /><STRONG>Escape character is '^]'.</STRONG></P><P><BR /><STRONG>[Expert@SMS:0]# telnet 192.168.217.81 18192</STRONG><BR /><STRONG>Trying 192.168.217.81...</STRONG><BR /><STRONG>Connected to 192.168.217.81.</STRONG><BR /><STRONG>Escape character is '^]'.</STRONG></P><P>&nbsp;</P><P>There is no connection to the <SPAN>18210 and&nbsp;18211&nbsp;</SPAN>ports because the gateways are not listening on them:</P><P><STRONG>[Expert@Gateway]# netstat -punta | grep 1821</STRONG><BR /><STRONG>[Expert@Gateway]#</STRONG></P><P>&nbsp;</P><P>SMS is R81.20 Take 41, gateways in R81.10 Take 130.</P><P>We'll reset the SIC manually but want to know why the SIC certificates weren't renewed automatically.</P><P>&nbsp;</P><P>P.D. In Global properties &gt; Firewall, Accept control connections option is enabled.</P><P>Any ideas?</P><P>Thanks in advanced</P><P>Regards</P> Mon, 13 May 2024 14:10:48 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SIC-certificate-expired/m-p/214027#M40856 Franktum 2024-05-13T14:10:48Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SIC-certificate-expired/m-p/214031#M40857 <P>I would ask CP TAC !</P> Mon, 13 May 2024 14:17:08 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SIC-certificate-expired/m-p/214031#M40857 G_W_Albrecht 2024-05-13T14:17:08Z