topic Impact "cpstop" SmartCenter (management) in General Topics

Impact "cpstop" SmartCenter (management)

Paret — Tue, 22 Nov 2022 16:16:55 GMT

Hello to all,

I have a disk space problem on my management server (SamrtCenter) R80.40.

I would like to implement the procedure (https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&eventSubmit_doGoviewsolutiondetails=&solutionid=sk94671) to add a disk in order to increase my log partition.

I would like to know if the "cpstop" command of this procedure will have an impact on my production traffic.
In other words, will this command affect my security gateways?

I hope I have made myself clear.
Thank you in advance for your answers and recommendations.

Re: Impact "cpstop" SmartCenter (management)

PhoneBoy — Tue, 22 Nov 2022 21:15:21 GMT

For a short period of time (e.g. a typical maintenance window of a few hours), having management offline should not impact production traffic.
If management is down for an extended period of time, it can have an impact on:

Site-to-Site VPNs authenticated using ICA Certificates (VPNs will terminate after 24 hours due to the CRL being unavailable)
Use of the CloudGuard Controller (see sk115657), which includes the use of Generic Datacenter objects (previous lookups are cached for a time)

Re: Impact "cpstop" SmartCenter (management)

the_rock — Wed, 23 Nov 2022 00:20:00 GMT

I think what @PhoneBoy said is most likely correct. You definitely dont want it to be down for too long, but if you only need to do this and then restart or shut down, I believe thats safe. I had done things like this before where mgmt server was down for up to 30 mins and no issues with production traffic at all.

Andy

Re: Impact "cpstop" SmartCenter (management)

Chris_Atkinson — Wed, 23 Nov 2022 09:53:08 GMT

Kinda goes without saying but you also won't have access to your logs while performing this process, to the extent possible the gateways will buffer logs locally until mgmt returns.

Re: Impact "cpstop" SmartCenter (management)

Daniel_Szydelko — Wed, 23 Nov 2022 10:58:44 GMT

Then it's worth saying that configuring Log Forwarding Settings (gateway/cluster object > Logs > Additional Logging) will be good option to automatically forward these logs on scheduled time back to SMS. Of course if SMS is only log server for these gateways/cluster.

Daniel.