topic Re: SMS lost connection to all in Firewall and Security Management

SMS lost connection to all

ED — Mon, 23 Jul 2018 10:18:53 GMT

Hi,

SMS connection has lost connection to all GW's that it manages. Red x on all objects under "Gateway & Servers" and message "Connection with '(name of object) ' is lost".

Installation of policy failed with

What could have caused this suddenly?

Re: SMS lost connection to all

Nüüül — Mon, 23 Jul 2018 10:59:28 GMT

Hi!

is sms service running on the gateway? How to debug SofaWare Management Server (SMS) daemon on Check Point Management Server

What version is the Management running on?

Did you recently upgrade the management?

daniel

Re: SMS lost connection to all

ED — Mon, 23 Jul 2018 11:43:39 GMT

No upgrade recently. Was away for 11 days and came back to this problem. Unable to open anything under "Gateway & Servers" in SmartConsole.

Re: SMS lost connection to all

Nüüül — Mon, 23 Jul 2018 11:59:34 GMT

Can you open GAiA Web UI on the Managment Server? And the Managment Server object in Console?

What is there stated for SIC? / WebUI : System Managment-->Certificate Authority

On management server CLI check cert expiration:

How to determine an SIC Certificate's expiration date

do you have access to the gateways?

Re: SMS lost connection to all

ED — Mon, 23 Jul 2018 12:36:51 GMT

Certificate Authority Status is Established on the Web UI for the management server. I can not open the management object in SmartConsole.

On the mgmt server I ran the command: cpca_client lscert -kind SIC

Not sure how to understand the output when I have several lines of CN names that are same. Here is an example for the same CN name for a gateway object:

Yes I have access to GW's trough Web UI.

Re: SMS lost connection to all

Nüüül — Mon, 23 Jul 2018 14:04:57 GMT

hmm... what does

cp_conf sic state

on the gateways say?

As you are not able to open even the management server object in GUI, i´d open up a SR

Re: SMS lost connection to all

ED — Tue, 24 Jul 2018 06:08:34 GMT

Trust State: Trust established.

Re: SMS lost connection to all

ED — Tue, 24 Jul 2018 08:34:39 GMT

Hi Daniel,

Just wanted to update you on this case and thank you for your help. I found sk113744 which solved the problem. One of my co-workers got a "certificate revoked" error which lead me to this sk. I did not get that error.

Here are the symptoms for this problem:

Login to the Security Management server via R80 SmartConsole fail with error: "Certificate revoked".
The "cpca_client lscert -stat Valid" command run on the Security Management server shows valid "cp_mgmt" certificates.
The "cpwd_admin list" command shows all processes are running.
All statuses are showing X sign.

Solution:

# cd $CPDIR/conf

# mv $CPDIR/conf/sic_cert.p12 /var/log/

# cpca_client revoke_cert -n "CN=cp_mgmt"

# cpca_client create_cert -n "CN=cp_mgmt" -f sic_cert.p12

# cpstop; cpstart

Re: SMS lost connection to all

Keneth_Gitonga — Thu, 27 Sep 2018 08:18:52 GMT

I will test this,I seem to have all the symptoms since even my sic status says "Established" and I have not had any certificates revoked.

Just to clarify,did you have the certificates revoked error? I didn't have that error but I seem to have all the symptoms