topic Upgrading SMS server from R80.20 to R80.30 in Firewall and Security Management

Upgrading SMS server from R80.20 to R80.30

TimLofgren — Mon, 30 Dec 2019 22:48:43 GMT

Hello all,

I am new to CheckPoint and recently passed my CCSA test. I have a new role with a new company and I need to upgrade the CheckPoint SMS server from R80.20 to R80.30. I have been poking around and it seems that the SMS server is not presenting the Gaia portal. I can reach the SMS server with SSH and use the Clish command line interface. I cannot browse to the Gaia portal like I can with the security gateway. I do not know how long it has been this way as the previous person was gone from the position for months before I joined the company. I assume there is a misconfiguration somewhere, I just do not know where to look or how to resolve. I have searched many R80.30 and R80.20 admin guides but found nothing on what I should check. Can anyone point me in the right direction?

Tim

Re: Upgrading SMS server from R80.20 to R80.30

PhoneBoy — Tue, 31 Dec 2019 00:04:04 GMT

Both gateways and management should have a Gaia WebUI available except in two circumstances:

1. It's a VSX gateway, where the WebUI is explicitly disabled.
2. The WebUI was disabled with set web daemon-enable off or similar.

See also: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk91380

Re: Upgrading SMS server from R80.20 to R80.30

Maarten_Sjouw — Tue, 31 Dec 2019 08:52:26 GMT

Tim,

Run the following command from clish on the SMS:
show configuration web
Output should be like this:
set web table-refresh-rate 15
set web session-timeout 100
set web ssl-port 443
set web ssl3-enabled off
set web daemon-enable on
At least now you know the port it is listening on and if the daemon is on.
From clish however you can also run the commands to run the upgrade:
installer download <TAB> (shows a list of available downloads)
Type the number to run the download.
installer verify <TAB> (Shows available install able packages)
then when the verify is ok you can run
installer install <TAB> (Shows install able packages)
This should get you on your way.

Re: Upgrading SMS server from R80.20 to R80.30

TimLofgren — Tue, 31 Dec 2019 14:14:51 GMT

Thanks Maarten_Sjouw.

The show configuration web command displayed that the port was 4434 instead of default value of 443 which is why I could not find it. I appreciate all of the help. Thanks to everyone that posted. If I need any more help I know where to find it now at least.

Tim