topic Re: HTTP Daemon (Multiportal) on HA Standby device (R80.10 build 421) in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13307#M917 <HTML><HEAD></HEAD><BODY><P>Reboot <IMG src="https://community.checkpoint.com/legacyfs/online/checkpoint/emoticons/grin.png" />&nbsp;Solved 99% of everything...</P></BODY></HTML> Wed, 07 Nov 2018 22:13:30 GMT JozkoMrkvicka 2018-11-07T22:13:30Z HTTP Daemon (Multiportal) on HA Standby device (R80.10 build 421) https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13302#M912 <HTML><HEAD></HEAD><BODY><P style="color: #333333; border: 0px; font-size: 14px;">hi check-folks <IMG src="https://community.checkpoint.com/legacyfs/online/checkpoint/emoticons/silly.png" />&nbsp;got a little nudge for you ... here is a brief story about it:</P><P style="color: #333333; border: 0px; font-size: 14px;"></P><P style="color: #333333; border: 0px; font-size: 14px;">1. HA on 2 5600 appliances,</P><P style="color: #333333; border: 0px; font-size: 14px;">2. standby device from its A/S HA is accessible by IP (SSH,ICMP) from Management subnets all over the allowed places but GAIA Portal (http2 daemon) isn't working at all -simply won't run.</P><P style="color: #333333; border: 0px; font-size: 14px;">3. I've regenerated self-signed certs and did followed few sk's: 91380, 97648, 84561 etc. even rise SR <img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://community.checkpoint.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /></P><P style="color: #333333; border: 0px; font-size: 14px;">Still no go,&nbsp;httpd won't start on standby device (primary gaia portal works like a charm!)</P><P style="color: #333333; border: 0px; font-size: 14px;">&nbsp;</P><P style="color: #333333; border: 0px; font-size: 14px;">I can ssh to the standby device but one thing isn't accessible - https/http either on 443 or any other port simply HTTP daemon won't start on that device (there were no chances to that cluster since nearly 1y in terms of the PKI/FQDN etc.)</P><P style="color: #333333; border: 0px; font-size: 14px;">&nbsp;</P><P style="color: #333333; border: 0px; font-size: 14px;">any ideas folks? alreago got a SR with TAC <SPAN class="" style="border: 0px; font-weight: inherit; font-size: 14px;"></SPAN>&nbsp;just from yesterday. SR on demand <IMG src="https://community.checkpoint.com/legacyfs/online/checkpoint/emoticons/silly.png" /></P><P style="color: #333333; border: 0px; font-size: 14px;">&nbsp;</P><P style="color: #333333; border: 0px; font-size: 14px;">Cheers</P><P style="color: #333333; border: 0px; font-size: 14px;">&nbsp;</P><P style="color: #333333; border: 0px; font-size: 14px;">Jerry</P></BODY></HTML> Tue, 06 Nov 2018 09:33:38 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13302#M912 Jerry 2018-11-06T09:33:38Z Re: HTTP Daemon (Multiportal) on HA Standby device (R80.10 build 421) https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13303#M913 <HTML><HEAD></HEAD><BODY><P>I would check licenses first&nbsp;<img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://community.checkpoint.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" />&nbsp;!</P></BODY></HTML> Tue, 06 Nov 2018 12:21:48 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13303#M913 G_W_Albrecht 2018-11-06T12:21:48Z Re: HTTP Daemon (Multiportal) on HA Standby device (R80.10 build 421) https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13304#M914 <HTML><HEAD></HEAD><BODY><P>seriously? Cluster is licensed and one Standby HTTP2 Daemon won’t work - how this relates to cplic?</P></BODY></HTML> Tue, 06 Nov 2018 12:31:16 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13304#M914 Jerry 2018-11-06T12:31:16Z Re: HTTP Daemon (Multiportal) on HA Standby device (R80.10 build 421) https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13305#M915 <HTML><HEAD></HEAD><BODY><P>ssl_mutex directory was missing - recreated, made permissions back to original and off we go - problem solved <img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://community.checkpoint.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" />&nbsp;thanks Ottawa TAC ! Case closed.</P></BODY></HTML> Tue, 06 Nov 2018 12:54:42 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13305#M915 Jerry 2018-11-06T12:54:42Z Re: HTTP Daemon (Multiportal) on HA Standby device (R80.10 build 421) https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13306#M916 <HTML><HEAD></HEAD><BODY><P>Yes,&nbsp;the famous issue from&nbsp;sk127792 ! The backside would be the issue from&nbsp;sk96117...</P></BODY></HTML> Tue, 06 Nov 2018 14:17:30 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13306#M916 G_W_Albrecht 2018-11-06T14:17:30Z Re: HTTP Daemon (Multiportal) on HA Standby device (R80.10 build 421) https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13307#M917 <HTML><HEAD></HEAD><BODY><P>Reboot <IMG src="https://community.checkpoint.com/legacyfs/online/checkpoint/emoticons/grin.png" />&nbsp;Solved 99% of everything...</P></BODY></HTML> Wed, 07 Nov 2018 22:13:30 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13307#M917 JozkoMrkvicka 2018-11-07T22:13:30Z Re: HTTP Daemon (Multiportal) on HA Standby device (R80.10 build 421) https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13308#M918 <HTML><HEAD></HEAD><BODY><P>Reboot did not solved anything but creating mutex directory DID ☺</P></BODY></HTML> Thu, 08 Nov 2018 09:30:14 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/HTTP-Daemon-Multiportal-on-HA-Standby-device-R80-10-build-421/m-p/13308#M918 Jerry 2018-11-08T09:30:14Z