topic Re: clear disconnected sessions? in Firewall and Security Management

clear disconnected sessions?

Melissa_Kjendle — Wed, 28 Feb 2018 19:43:19 GMT

migrated R80.10 firewall management to a new VM. Cannot push policy or view VPN communities. Several disconnected (stale) sessions that cannot be discarded. I found script to clear web_api sessions SK113955, but need to clear old user connections:

error when installing Jumbo:
The package failed to install

Reason of failure: Internal error when running hook:

pre_r80.10_upgrade_verifications.sh. More information: Operation failed. Publish or Discard all sessions an run operation again. Administrators with open sessions: MyUserNameOtherAdminUserName

Re: clear disconnected sessions?

PhoneBoy — Sat, 03 Mar 2018 03:05:31 GMT

You should be able to clear these sessions in SmartConsole as well.

Go to Manage & Settings > Sessions > View Sessions

Re: clear disconnected sessions?

Hugo_vd_Kooij — Mon, 05 Mar 2018 08:47:26 GMT

You may still have open sessions in the database which you can't find in the GUI.

I have had a TAC case for this and got some query commands to find them. Unfortunatly I can't find them in my own notes or in Secure Knowledge.

If you still have the issue and no session listed in the GUI then it is time to open a TAC case.

Re: clear disconnected sessions?

Melissa_Kjendle — Mon, 05 Mar 2018 14:11:42 GMT

View:

#psql_client cpm postgres -c "select applicationname,objid,creator,state,numberoflocks,numberofoperations,creationtime,lastmodifytime from worksession where state = 'OPEN' and (numberoflocks != '0' or numberofoperations != '0');"

Clear:

# mgmt_cli discard --port 4434 uid 4b2ac7a8-9b0b-4e39-a3f0-4c065d631cdf
Username: admin
Password:
number-of-discarded-changes: 2
message: "OK"

Re: clear disconnected sessions?

Robert_Decker — Wed, 07 Mar 2018 16:23:01 GMT

Well done!

In addition, there is a python script based on management API SDK -

https://github.com/CheckPointSW/cp_mgmt_api_python_sdk

Look at "discard_sessions" sample.

Robert.

Re: clear disconnected sessions?

Ron_Izraeli — Fri, 08 Feb 2019 23:09:14 GMT

Check out SmartConsole Extensions platform to integrate this script as a web page inside SmartConsole

Re: clear disconnected sessions?

Danny — Tue, 26 Feb 2019 11:58:07 GMT

I found scriptable solutions to discard sessions in sk133872 and sk113955.