topic Re: No access via ssh/webui after deleting VSX gateway in Firewall and Security Management

No access via ssh/webui after deleting VSX gateway

GreyOwl — Tue, 28 Jan 2020 22:46:22 GMT

Hi mates,

please help to solve the problem:

I created VSX gateway (R80.20) in my test environment but deleted it soon for some reasons, as described in Checkpoint VSX R80.20 Administration Guide:

"To delete a VSX Gateway:
1. From the Gateways & Servers view or Object Explorer tree, right-click the VSX Gateway object
on the Object Tree and select Delete.
2. In the window that opens, click Yes."

Now I have no access via SSH/WebUI to Security Gateway.

Is it possible to restore the access? Or I have to reinstall the gateway?

Thank you.

Re: No access via ssh/webui after deleting VSX gateway

Maarten_Sjouw — Wed, 29 Jan 2020 07:43:34 GMT

Re: No access via ssh/webui after deleting VSX gateway

PhoneBoy — Sat, 01 Feb 2020 00:30:29 GMT

Note that any change to a VSX object in SmartConsole takes effect immediately without a policy install.
Makes sense that deleting the VSX Gateway object would cause the behavior you describe.
Connecting via console and executing fw unloadlocal is pretty much your only option.

Re: No access via ssh/webui after deleting VSX gateway

ramakrishnan — Mon, 30 Jan 2023 11:32:55 GMT

Can we take SSH login / Web GUI to VSX gateways, Basically I could login VSX firewall.

For example, as showed in the diagram, I am unable to login VSX firewall 172.27.48.49/50 ...but able to login 192.168.4.10 .

How could i login and check anything on VSX gateway (172.27.48.49, 172.28.49.50)

Re: No access via ssh/webui after deleting VSX gateway

Chris_Atkinson — Mon, 30 Jan 2023 13:09:18 GMT

VSX does not have an accessible WebUI, you have SSH/Console/LOM depending on the appliance specification.

Typically you SSH to the cluster members mgmt IP and then use vsenv or equivalent from expert mode to enter the appropriate VS context.

Note R77 is very out of support at this point and requires upgrading.

Re: No access via ssh/webui after deleting VSX gateway

ramakrishnan — Tue, 21 Feb 2023 06:58:24 GMT

As per attached pic I can well understand corp, copr-np and It are security gateway which holding the polices.

I just wanted understand about VSX, as per attached what are those devices under VSX-MGT domain, virtual switches.

Re: No access via ssh/webui after deleting VSX gateway

PhoneBoy — Tue, 21 Feb 2023 20:54:18 GMT

Either that or virtual routers.
In any case, these do not have a specific policy (though a virtual router will have routes associated).