topic Re: new MLM Domain hook-up issue (despite R81.10) in Firewall and Security Management

new MLM Domain hook-up issue (despite R81.10)

Jerry — Thu, 24 Aug 2023 20:44:13 GMT

hi guys, quick one:

my customer got an error when adding new Domain to the MLM:

"Failed to send request to remote MDS"

this happens when they add new Domain Server's Domain, provide Configuration Name: + IPv4 (type Log Server).

any ideas why "Create Domain Server Task fails with the above error? highly appreciate if you know that "zonk" from the MDS 🙂

ps. NAT's and Comms works, IP wise all is sorted, the CMA as well as MDS can reach the new Domain eth0:1 etc. and hit-counts on NAT's are increasing just fine except I cannot figure it out based on netstat's and pcap's what is wrong.

Re: new MLM Domain hook-up issue (despite R81.10)

the_rock — Fri, 25 Aug 2023 12:19:53 GMT

I've never been P-1 guru by any means, have not worked on it since R77.30, but maybe @PhoneBoy & @Timothy_Hall can chime in. I will also ask around, see if any of my colleagues might have some idea and keep you posted.

Cheers mate.

Andy

Re: new MLM Domain hook-up issue (despite R81.10)

Jerry — Fri, 25 Aug 2023 12:22:34 GMT

cheers mate much appreciate it!

Re: new MLM Domain hook-up issue (despite R81.10)

the_rock — Fri, 25 Aug 2023 12:24:13 GMT

For you bro, no charge, except iphone charge ; - ). Anyway, I found below, just going through it now to see if any of scenarios might be related.

Andy

https://support.checkpoint.com/results/sk/sk98768

Re: new MLM Domain hook-up issue (despite R81.10)

Jerry — Fri, 25 Aug 2023 12:29:18 GMT

sadly I do know that SK, it is little bit irrelevant though as I'm not facing mirroring MDS's issue but MLM Domain Server CMA-based Logging server creation issues. MLM itself is just fine, SIC'ed and all works between the MDS, Global and the MLM (all 2 MDS's and MLM shows on MDS HA as Sync'd so this isn't an issue mate really.

Re: new MLM Domain hook-up issue (despite R81.10)

the_rock — Fri, 25 Aug 2023 12:30:48 GMT

K, thats fair, understood. If I find anything else, will update you.

Andy

Re: new MLM Domain hook-up issue (despite R81.10)

Jerry — Fri, 25 Aug 2023 12:31:00 GMT

ps. I went through majority of the SK's we've got as well as CheckMates posts and still struggled to find the answers, really not an easy case to solve 😞

Re: new MLM Domain hook-up issue (despite R81.10)

the_rock — Fri, 25 Aug 2023 12:33:14 GMT

Dont despair, we will solve it! You know this community, people always come together to find an answer. I am fairly available today, so have time to research and help.

Re: new MLM Domain hook-up issue (despite R81.10)

Jerry — Fri, 25 Aug 2023 12:33:18 GMT

our famous on-hand toolbox called ATRG

https://community.checkpoint.com/t5/General-Topics/ATRG-Ultimate-list/m-p/184397/thread-id/30711

also didn't manage to convince me we've got that issue documented within ANY of our ATRG docs 😞

Re: new MLM Domain hook-up issue (despite R81.10)

the_rock — Fri, 25 Aug 2023 13:39:36 GMT

Hey brother...I asked around and sadly, no one knows, as we dont have any customers running P-1 (MDS) product, BUT, I wont give up, Im very persistent person.

I will update you at 12 pm est, 5 pm UK time.

Cheers,

Andy

Re: new MLM Domain hook-up issue (despite R81.10)

Jerry — Fri, 25 Aug 2023 13:49:58 GMT

Cheers bud I have an update for you as well:

Valid Licence Check

There is a mismatch between the installation type of the machine and the type of licence key installed on it. Contact Check Point Support for a fix.

WARNING

BASH COMMAND RESULT

--> This MLM machine does not have a CPSB-MLOGS licence installed.

Re: new MLM Domain hook-up issue (despite R81.10)

Jerry — Fri, 25 Aug 2023 13:50:34 GMT

and another one from CPMDoctor:

--> Error - in /opt/CPshrd-R81.10/registry/HKLM_registry.data_cust file the 'SIC' field is not empty

Re: new MLM Domain hook-up issue (despite R81.10)

the_rock — Fri, 25 Aug 2023 13:59:29 GMT

Never been a license expert, but I assume regular eval license would cover this?

Re: new MLM Domain hook-up issue (despite R81.10)

Jerry — Fri, 25 Aug 2023 14:08:19 GMT

CPSB-MLOGS

Re: new MLM Domain hook-up issue (despite R81.10)

the_rock — Fri, 25 Aug 2023 15:02:29 GMT

Hey all,

Just to give quick update on this issue. Jerry and I connected offline and we are fairly confident the reason why this fails, at least based on all the errors and messages, is that proper license is missing, as its looking for cpsb-mlogs and eval only shows cpsb-logs string. Lets see if we can figure it out Monday.

Andy

Re: new MLM Domain hook-up issue (despite R81.10)

andrewb — Sun, 28 Jan 2024 05:06:18 GMT

Hi, is there a solution on this issue as we are also encountering the same error - new MDM HA

Re: new MLM Domain hook-up issue (despite R81.10)

the_rock — Sun, 28 Jan 2024 21:35:17 GMT

Licensing problem?

Andy

Re: new MLM Domain hook-up issue (despite R81.10)

andrewb — Sun, 28 Jan 2024 21:40:50 GMT

Hi,

Im thinking of this, did Jerry resolved the issue with license also?

Thanks

Re: new MLM Domain hook-up issue (despite R81.10)

the_rock — Sun, 28 Jan 2024 21:44:08 GMT

He is in UK, so its almost 10 pm there now, so I asked him via email, as I have his contact.

But, lets see if he responds to this tomorrow : - )

@Jerry ...was this solved on your end last year?

Best,

Andy

Re: new MLM Domain hook-up issue (despite R81.10)

andrewb — Sun, 28 Jan 2024 22:02:22 GMT

Thank you for this 🙂