topic Re: Access to GAIA PORTAL in General Topics

Access to GAIA PORTAL

Matlu — Thu, 03 Aug 2023 14:38:29 GMT

Hello, team.

I have an infrastructure inherited from a previous administrator, but he forgot the access credentials to the GW (We have a cluster of 6000 computers).

Cluster Object IP: 200.60.21.100
PASSIVE FW IP: 10.7.15.67
IP FW ACTIVE: 10.7.15.66

I have tried to access by GAIA PORTAL to the active member, because we need to delete some static routes, but when I try with the https://10.7.15.66, it does not open the GAIA PORTAL.

I have the impression that the access is with a different port, but we don't have that data at hand.

Is there any way to know which port opens the GAIA PORTAL?

P.S. I do have access to the GW CLI active.

Greetings.

Re: Access to GAIA PORTAL

G_W_Albrecht — Thu, 03 Aug 2023 14:44:50 GMT

See here: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Gaia_AdminGuide/Topics-GAG/Advanced-Gaia-Configuration.htm?Highlight=portal

Re: Access to GAIA PORTAL

the_rock — Thu, 03 Aug 2023 14:47:05 GMT

Yes, do this from clish:

[Expert@quantum-firewall:0]# clish
quantum-firewall> show web ssl
ssl-port - Web configuration tool SSL port number
ssl3-enabled - Allow using SSL3 to access the web configuration tool
quantum-firewall> show web ssl-p
quantum-firewall> show web ssl-port
web-ssl-port 4434
quantum-firewall>

Andy

Re: Access to GAIA PORTAL

Matlu — Thu, 03 Aug 2023 14:53:12 GMT

Thank you for your response.

I have to delete several static routes, and I see it more "feasible" to do it from the GAIA PORTAL.

One question, please, in a GW Cluster, do you have to delete the routes in both Firewalls?
Or is it enough to just delete them from the active member?

Cheers. 🙂

Re: Access to GAIA PORTAL

the_rock — Thu, 03 Aug 2023 14:57:44 GMT

In a cluster, configs should match on both members. Unlike Fortinet or Cisco, as you know, with CP, it has to be done manually, does not sync to backup member when you do change on master.

Andy

Re: Access to GAIA PORTAL

Matlu — Thu, 03 Aug 2023 15:07:57 GMT

Now everything is clearer.

🙂

What I am sure of is that it is not necessary to send to install policies, as far as "add/remove" routes that are created either by CLI/GAIA PORTAL, right?

Thanks, Buddy.

Re: Access to GAIA PORTAL

the_rock — Thu, 03 Aug 2023 15:42:53 GMT

Correct...to add/remove routes, do it on both firewalls, does NOT need policy install.

Andy

Re: Access to GAIA PORTAL

Matlu — Thu, 03 Aug 2023 15:59:05 GMT

A question,

Is it a normal behavior of the Firewall Checkpoint, to make any kind of change at GAIA PORTAL level, and to be sure that the changes are automatically applied, without the need to give a "save", as it is normally done through the CLI?

Since I have seen that difference, in the GAIA PORTAL, you simply change what you need.

In the CLI, you usually always give a "save config" because otherwise I understand that it does not "apply" the change.

Is this normal?

Re: Access to GAIA PORTAL

the_rock — Thu, 03 Aug 2023 16:01:54 GMT

Right, in clish you just run save config to save all the commands you ran. In web UI, if there is apply or save, you click that, if not, then no need. Whatever gets saved in clish, will be reflected in web UI as well.

Andy