topic Security Gateway - log Certificate defaultCert will expire in less than 30 days in Firewall and Security Management

Security Gateway - log Certificate defaultCert will expire in less than 30 days

Forsaken_61 — Wed, 11 Sep 2024 15:44:22 GMT

Hi!

I've got some alerts on my Management Server about certficates that are about to expire. This Is visible under the "blade:VPN" when I search and query for logs. It's also visible in the UI under "Gateways & Servers".

Which Is interesting. Because I don't have the blade "VPN" active on either of my Security Gateways. I've only Threat Emulation & Anti-Virus enabled.

I have an alternative certificate set for Threat Prevention API functionality. But I mean this couldn't related to the VPN certificate warnings?
How to set an alternative certificate for Threat Prevention API functionality (checkpoint.com)

Would be more sense If It said "Threat Prevention API Certificate" Is about to expire, which It soon does. Currently updating them manuelly and keeps and eye. This should in best case generate a log.
When I updated them manually the other day no internal log showed up. Like "certficate" succesfully updated. Neither of that.

Have any other the same issue?

Thanks

Re: Security Gateway - log Certificate defaultCert will expire in less than 30 days

PhoneBoy — Wed, 11 Sep 2024 17:31:53 GMT

Just to understand the situation: you're not using VPN, but you got a message claiming to be related to VPN because the Threat Prevention API certificate was about to expire?

Re: Security Gateway - log Certificate defaultCert will expire in less than 30 days

the_rock — Wed, 11 Sep 2024 17:47:28 GMT

Can you send what you see below?

Andy

Re: Security Gateway - log Certificate defaultCert will expire in less than 30 days

Forsaken_61 — Thu, 12 Sep 2024 07:12:10 GMT

Exactly! That's correct.

But when I click on "Device & License information" on my Security Gateway object It says that It will expire in october 18th. That doesn't match when I installed the Threat Prevention API certificate. Differs weeks from that.

Therefore I'm confused and think this Is strange.I dont even have IPSec VPN enabled. It's unchecked.

Re: Security Gateway - log Certificate defaultCert will expire in less than 30 days

Forsaken_61 — Thu, 12 Sep 2024 07:13:47 GMT

On my Security Gateway objects the "IPSec VPN"Is unchecked. I dont have that enabled.

Under "General Properties" --> "Network Security" --> I only have Firewall enabled.

Re: Security Gateway - log Certificate defaultCert will expire in less than 30 days

PhoneBoy — Thu, 12 Sep 2024 17:54:39 GMT

Sounds like a bug that should be reported through TAC: https://help.checkpoint.com