topic Re: Unable to access Gaia R77.30 and R80 through Web UI in Firewall and Security Management

Unable to access Gaia R77.30 and R80 through Web UI

dsd_asddc — Wed, 20 Dec 2017 19:55:23 GMT

Hi, I'am having some issues while doing the initial configuration for Gaia R77.30 and Gaia R80.10

after installing , I can ping the management IP from a Virtual Machine but unable to open the same in a brower

https://<management IP>

But everything works fine if it is a SPLAT R75 and SPLAT R76

Can any one please advise if I need to do any additional configuration apart from mgmt address so that I can

access it through Web UI

any help much appreciated

Thanks

Re: Unable to access Gaia R77.30 and R80 through Web UI

PhoneBoy — Wed, 20 Dec 2017 20:58:34 GMT

What OS are you attempting to access the WebUI from?

What specific errors are you getting?

Can you verify the traffic is reaching the system with a tcpdump?

At some point (probably R77.30), we switched to SHA2 certificates for the WebUI portal.

Older systems (notably Windows XP pre-SP3) won't be able to connect to these systems.

Re: Unable to access Gaia R77.30 and R80 through Web UI

dsd_asddc — Thu, 21 Dec 2017 06:43:53 GMT

Hi ,Thanks for a quick response,

I'am using windows XP professional version 2002 service pack2 as my virtual machine client ..

I have also run TCPDUMP on newly installed GAIAR77.30 I can see the packets arriving and leaving from the management interface ..

Any comments much appreciated

Re: Unable to access Gaia R77.30 and R80 through Web UI

PhoneBoy — Thu, 21 Dec 2017 06:53:15 GMT

Like I said, the versions of XP prior to SP3 don’t support SHA2 certificates.

As such, what you are seeing is expected behavior.

If you must use XP, upgrade to Service Pack 3, but I recommend using a supported OS instead.

Re: Unable to access Gaia R77.30 and R80 through Web UI

Gaurav_Pandya — Thu, 21 Dec 2017 09:07:55 GMT

HI,

Yeah. That is correct what Dameon has suggested. Adding to that if you are facing error SSL version or Cipher mismatch then you can refer sk93395.

Re: Unable to access Gaia R77.30 and R80 through Web UI

dsd_asddc — Fri, 29 Dec 2017 15:55:09 GMT

Hi ,

I have upgraded the machine to Windows 7 Home basic 32 bit , I can access it via Web GUI, I can ping from my machine to the newly installed firewall

vice versa, I can see the TCPdump (three way hand shake )

but I'am unable to proceed in WEB GUI (https://<management IP > after Management Connection Wizard ,

Any help will be appreciated

Re: Unable to access Gaia R77.30 and R80 through Web UI

PhoneBoy — Sat, 30 Dec 2017 07:10:56 GMT

Windows 7 doesn't support SHA2 certificates either unless you apply SP1: Microsoft Security Advisory 3033929 | Microsoft Docs

Re: Unable to access Gaia R77.30 and R80 through Web UI

dsd_asddc — Sat, 30 Dec 2017 11:00:37 GMT

Hi Dameon, Thanks for your quick response,

What Windows OS and what version of browser I should be using to get this working

Can you pl kindly advise ..

Re: Unable to access Gaia R77.30 and R80 through Web UI

PhoneBoy — Sat, 30 Dec 2017 11:44:28 GMT

Windows 7 and above with the latest versions of Chrome, IE, or Firefox should work.

Re: Unable to access Gaia R77.30 and R80 through Web UI

dsd_asddc — Sat, 30 Dec 2017 15:57:35 GMT

As mention above I'am already using windows 7 32 bit Service Pack 1 , with latest chrome , Internet explorer as browser

Re: Unable to access Gaia R77.30 and R80 through Web UI

PhoneBoy — Sat, 30 Dec 2017 16:17:55 GMT

I'm guessing the problem is with your specific variant of Windows.

To confirm this, simply try connecting with http.

You should get a redirected to an https URL, which will likely show you an error.

An actual screenshot of this would be helpful.

Another thing to try is a modern Linux distribution (e.g. Ubuntu or similar) with Firefox or Chrome, which should work for the purposes of running the First Time Wizard and configuring the Gaia WebUI.

If none of these work, then you can run the First Time Wizard through the CLI using the following procedure: How to run the First Time Configuration Wizard through CLI in Gaia R76 and above

Re: Unable to access Gaia R77.30 and R80 through Web UI

dsd_asddc — Sat, 30 Dec 2017 21:33:49 GMT

I'am unable to proceed after this window , I have tried using all different browsers ..

Re: Unable to access Gaia R77.30 and R80 through Web UI

PhoneBoy — Sat, 30 Dec 2017 22:40:43 GMT

The fact you’re getting this far (versus just an error page from the browser) suggests it’s not related to SHA2 at all.

I recommend engaging with our TAC for further troubleshooting or use the workaround I provided.

Re: Unable to access Gaia R77.30 and R80 through Web UI

Gaurav_Pandya — Tue, 02 Jan 2018 10:05:25 GMT

For a workaround, You can complete First time vizard through CLI. Please refer below URL.

https://community.checkpoint.com/docs/DOC-2410-first-time-vizard-through-cli

For GUI solution, please engage TAC as suggested by Dameon.

Re: Unable to access Gaia R77.30 and R80 through Web UI

Sachin_Guda — Tue, 08 May 2018 13:20:58 GMT

Hello All,

I have simulated same in the lab and found that is problem with RAM.

You must have to use 8GB RAM for your virtual Machine (Tried with 4GB, it didnt work, Didnt try with any 6GB).

Regards,

Sachin Guda

Re: Unable to access Gaia R77.30 and R80 through Web UI

Jeff — Thu, 31 May 2018 03:10:51 GMT

I have the same problem. The memory expansion didn't help. I decide to expan the system root partition during installation process. It helped me.

Re: Unable to access Gaia R77.30 and R80 through Web UI

Petr_Hantak — Fri, 01 Jun 2018 05:51:18 GMT

Yevgeniy, how much space did you provide there?

Re: Unable to access Gaia R77.30 and R80 through Web UI

Jeff — Mon, 04 Jun 2018 02:48:40 GMT

First, I used 35G of HDD for system and 6G for root partition. I have my reasons for this.

Then I have increased the root partition to 12G.

Re: Unable to access Gaia R77.30 and R80 through Web UI

Petr_Hantak — Tue, 05 Jun 2018 06:45:55 GMT

Thank you for info. I fully understand that you want to reduce size of installation. I'm using shared LAB ESXi for testing purposes and space is limited time to time. So it is good to find some suitable minimum for deployment.

Re: Unable to access Gaia R77.30 and R80 through Web UI

Edwin_Onyango — Mon, 09 Jul 2018 08:47:11 GMT

Hi, I have a similar issue. I have installed checkpoint on Vmware workstation but I cannot access it from my web page. I am using ubuntu 17.10 computer. Kindly help me on this