topic Re: New Install Security Management Server in Firewall and Security Management

New Install Security Management Server

H_Cheng — Sat, 03 Nov 2018 00:03:46 GMT

I am trying to install R80.10 on VMware for my learning. After I install GAIA and configure Security Management Server during the first login GAIA, I am unable to login through SmartConsole. I get “Unable to connect to server. Please make sure that all processes of the server are up and running.”. I checked cpconfig the certificate’s fingerprint is same as SmartConsole prompts, run cpm_status.sh showing CheckPoint Security Management Server is running state. And I have also tried to re-install GAIA with Jumbo Hotfix installed, but I get the same problem.

Do anyone instruct me how I can setup the environment? Is there any log file I can check for problem determination?

Thanks

Re: New Install Security Management Server

PhoneBoy — Sat, 03 Nov 2018 07:43:01 GMT

It can take several minutes before you're able to connect with SmartConsole on the first startup.

What hardware (RAM/disk) did you configure the virtual machine with?

Re: New Install Security Management Server

H_Cheng — Sat, 03 Nov 2018 10:05:42 GMT

I wait for the system startup and load a while, and I checked the CPU utilization with "top" command. I assigned 6G RAM and 4 virtual core. When I login SmartConsole, it can prompt the server's fingerprint and I see there are few more java processes run. But after click to continue login, it returns "Unable to connect to server".

Re: New Install Security Management Server

JozkoMrkvicka — Sat, 03 Nov 2018 12:38:02 GMT

In my LAB it takes around 10 minutes (2 GB RAM, 2 cores).

I am checking "api status" command to see if all proccesses were started (and if API is listening).

Just turn on VM and go for coffee

Re: New Install Security Management Server

PhoneBoy — Sat, 03 Nov 2018 12:48:36 GMT

6gb of RAM is bare minimum and will not provide an optimal experience, especially on VM.

I would allocate at least 8gb of RAM to the VM, more if you intend to use SmartEvent as well.

Re: New Install Security Management Server

Vladimir — Sat, 03 Nov 2018 14:26:02 GMT

Use this command to determine status of the management server: $CPMDIR/scripts/check_cpm_status.sh

[Expert@gw-83a11b:0]# $CPMDIR/scripts/check_cpm_status.sh
CPM server started
[Expert@gw-83a11b:0]#

Re: New Install Security Management Server

H_Cheng — Sun, 04 Nov 2018 00:27:59 GMT

I checked the status with this script. The Management Server is running.

Re: New Install Security Management Server

H_Cheng — Sun, 04 Nov 2018 04:50:15 GMT

I wait for an hour and I checked "api status" that CPM and FWM are "Started" state but API is "Stopped".

What can I do next to fix it?

Thanks for your support.

Re: New Install Security Management Server

JozkoMrkvicka — Sun, 04 Nov 2018 08:08:52 GMT

try "api start" to manually start API.

Do you have valid license ? What is the output of "cplic print" command?

Re: New Install Security Management Server

H_Cheng — Sun, 04 Nov 2018 08:57:14 GMT

No license list out. I just downloaded the trial software and install on VMware for testing purpose.

Re: New Install Security Management Server

JozkoMrkvicka — Sun, 04 Nov 2018 10:22:47 GMT

You have trial license for 15 days only. As you dont have any listed there, the trial license already expired.

You need to generate 30 days evaluation all-in-one license from your UserCenter.

Re: New Install Security Management Server

H_Cheng — Mon, 05 Nov 2018 04:25:04 GMT

I just new created VM and installed the GAIA & Management Server. The trial license has not expired.

Re: New Install Security Management Server

JozkoMrkvicka — Mon, 05 Nov 2018 09:37:49 GMT

So from now on you have 15 days to do whatever you want. Are you able to connect via SmartConsole now?

Re: New Install Security Management Server

H_Cheng — Mon, 05 Nov 2018 14:22:16 GMT

Yes, after run "api start" and wait for the process started, I can login the SmartConsole. But, when I restart the firewall, the API does not start automatically. Is there any configuration I can let it start when the server start/restart?

Thank you for your support.

Re: New Install Security Management Server

JozkoMrkvicka — Mon, 05 Nov 2018 21:36:34 GMT

It is somewhere in SmartConsole Settings.

Re: New Install Security Management Server

Vladimir — Mon, 05 Nov 2018 21:45:18 GMT

Re: New Install Security Management Server

H_Cheng — Tue, 06 Nov 2018 15:14:35 GMT

I enable the Automatic start option in Management API - Advanced Settings. Then publish, and run "api restart". After API restarted, I checked all processes (API, CPM, FWM) are Started. However, after "shutdown -r now" to reboot the CPM, the API process still not auto starts. I need to run "api start" manually. Is there any task I missed?

Re: New Install Security Management Server

Vladimir — Tue, 06 Nov 2018 15:18:29 GMT

What does the output of $CPMDIR/scripts/check_cpm_status.sh show after restart?

Re: New Install Security Management Server

Vladimir — Tue, 06 Nov 2018 15:20:06 GMT

Please check if this is applicable:

"API readiness test FAILED. The server is down and unable to receive connections!" error message in "api status"

Re: New Install Security Management Server

JozkoMrkvicka — Tue, 06 Nov 2018 18:03:57 GMT

You can also try to install the latest jumbo hotfix for R80.10.