topic Re: Cannot access web UI Gaia R77.30 appliance 4400 in Firewall and Security Management

Cannot access web UI Gaia R77.30 appliance 4400

uhkh57 — Mon, 05 Aug 2024 16:37:42 GMT

Hi Guys,

I have a checkpoint appliance 4400, this firewall run in R77.30

I had restore the R77.30 image with the boot menu (without usb key)

I can access at clish by ssl or serial.

But, when I want connect in the web UI with management IP I see "ERR_CONNECTION_REFUSED" in any browsers !

Into the httpd2 log I can read :

[error] (1) Permission denied: mod_mime_magic: can't read magic file /web/config/magic...

Moreover the file is not in the repertory !

thanks for your help !

(sorry for my english, I am french !)

Re: Cannot access web UI Gaia R77.30 appliance 4400

_Val_ — Tue, 06 Aug 2024 06:52:02 GMT

R77.30 is out of support for a long time. It uses very old TLS ciphers, so you need a browser as old as the version to open a WebUI. All current browsers will suggest much stronger HTTPS encryption from the client side which R77.30 cannot handle, hence the "magic" error.

Re: Cannot access web UI Gaia R77.30 appliance 4400

rrbranco — Tue, 06 Aug 2024 14:03:44 GMT

If you don't mind sharing...

You did a restore to factory defaults ?

Why do you need R77.30 ? If you really need R77.30 with the current / active configuration without factory default, then I think that you can try to downloading and running a firefox portable browser dated from years ago (if you trust running old software from wherever you download it)

This HW 4400 appliance end of support happened Jun 2022 and and the latest supported version was R80.40 according to https://www.checkpoint.com/support-services/support-life-cycle-policy/#appliances-support

Is it possible to try to do a fresh install R81.20 on that and access the webui using current browser versions ?

Re: Cannot access web UI Gaia R77.30 appliance 4400

the_rock — Tue, 06 Aug 2024 14:13:21 GMT

I have no clue in the world if this will work, but you can try this trick to open old school iexplore and see if that works to get to web UI. You may also need to check and disable TLS versions as a test, as per below and probably enable ssl ones.

https://www.reddit.com/r/Windows11/comments/vdv9nj/easiest_way_to_open_internet_explorer_on_windows/?rdt=52418

Andy

Re: Cannot access web UI Gaia R77.30 appliance 4400

Tal_Paz-Fridman — Tue, 06 Aug 2024 14:16:44 GMT

So aside from the need to urgently move to a more current version (like R81.20) please look at the solution suggested in https://support.checkpoint.com/results/sk/sk103397 ( Scenario 8 )

Re: Cannot access web UI Gaia R77.30 appliance 4400

the_rock — Tue, 06 Aug 2024 14:26:19 GMT

Valid point, that may help, I hope.

Andy