topic Re: Questions about Network Feed in General Topics

Questions about Network Feed

JimmySnow — Fri, 18 Aug 2023 02:11:36 GMT

Dear all,

We have started using R81.20 Network Feed.

We have one SMS server and one cluster, including two gateways; all of them are R81.20

SMS: R81.20 take 8

GW: R81.20 take 10

We have set up Network Feed, and we can successfully test feed connectivity.

However, the result shows our gateways failed to update the network feed.

We checked the feed settings and found the certificate-id is missing, and it seems the certificate-id cannot be saved in the feed object

Is anyone encounter this problem?

If any one need more/detail information, please let me know

Thanks

====modified the post and add screenshot=====

1 After created the network feed, I clicked “Test Feed”

2 Then I clicked “Accept certificate anyway”

3 Then I clicked “Trust and Recheck”

4 The test result showed OK

5 Everything was fine here, the self-signed certificate was correctly when I moved mouse to the blue icon.

6 However, I found that after I clicked “OK” in Step 5. The feed did not change after 5 minutes. So, I checked the network, and the blue icon of signed certificate DISAPPEARED.

7 I used command line to show the feed, there is no certificate-id in it

8 Hence, I used command line to add certificate-id, and the certificate-id is in the feed

However, my network feed still cannot get the latest feed on my server, after I check my SMS, the network feed object on my SMS shows the same as Step 6

Re: Questions about Network Feed

PhoneBoy — Wed, 16 Aug 2023 16:00:53 GMT

“We checked the feed settings and found the certificate-id is missing, and it seems the certificate-id cannot be saved in the feed object”

What precisely is meant by this?
Please provide a screenshot (sensitive details can be redacted).

Re: Questions about Network Feed

the_rock — Wed, 16 Aug 2023 16:03:43 GMT

Im with Phoneboy here, not really sure what you mean by cert id is missing.

Andy

Re: Questions about Network Feed

JimmySnow — Fri, 18 Aug 2023 01:54:16 GMT

Dear Sir,

Thank you for the suggestion, I have modified my post and added screenshot in it

Re: Questions about Network Feed

JimmySnow — Fri, 18 Aug 2023 01:55:57 GMT

Dear Sir,

Thank you for replying my message, I have added screenshots

Re: Questions about Network Feed

the_rock — Fri, 18 Aug 2023 02:07:20 GMT

Based on what you sent, to me anyway, seems like its working fine. Does it show green if you test it from smart console at this point?

Andy

Re: Questions about Network Feed

JimmySnow — Fri, 18 Aug 2023 02:13:43 GMT

Yes sir, The test results are fine, like the fourth screenshot in my post

However, when I open the settings of the feed, it go back to the first screenshot, even though I have used command line to setup the certificated-id

Re: Questions about Network Feed

the_rock — Fri, 18 Aug 2023 02:39:34 GMT

Works fine for me

Andy

[Expert@QUANTUM-MANAGEMENT:0]# mgmt_cli show network-feed name test-feed
Username: admin
Password:
uid: "3a4737ad-3427-4534-bbd7-20efe27b4293"
name: "test-feed"
type: "network-feed"
domain:
uid: "41e821a0-3720-11e3-aa6e-0800200c9fde"
name: "SMC User"
domain-type: "domain"
update-interval: 60
data-column: 1
feed-format: "Flat List"
feed-type: "IP Address"
custom-headers: []
feed-url: "https://list.***.******rk/checkpoint_threatlist.txt"
certificate-id: "1cdea6428f1587cc3f40516b48788f5512c3be0d"
ignore-lines-that-start-with: "#"
fields-delimiter: "\n"
use-gateway-proxy: true
comments: ""
color: "black"
icon: "NetworkObjects/NetworkFeed"
tags: []
meta-info:
lock: "unlocked"
validation-state: "ok"
last-modify-time:
posix: 1692326114650
iso-8601: "2023-08-17T22:35-0400"
last-modifier: "admin"
creation-time:
posix: 1692326114650
iso-8601: "2023-08-17T22:35-0400"
creator: "admin"
read-only: false
available-actions:
edit: "true"
delete: "true"
clone: "not_supported"

[Expert@QUANTUM-MANAGEMENT:0]#

Re: Questions about Network Feed

JimmySnow — Fri, 18 Aug 2023 03:06:51 GMT

The problem is really tricky

In this environment, command line shows OK, but my SMS always shows the 6th screenshot when I open the settings of the network feed, and my gateways cannot get the feed correctly...

I have tried created different network feed objects, reboot my SMS server, set network feed object by command line, but the results are the same...

Also, I am planning to update to take 24 and test again...

Any ideas where I can check and modify to fix this problem?

Re: Questions about Network Feed

the_rock — Fri, 18 Aug 2023 03:17:59 GMT

Im on take 26, latest one. Maybe TAC case would be good idea.

Re: Questions about Network Feed

Jayves — Mon, 26 Feb 2024 14:41:37 GMT

may i know if you still encounter this issue? i have same issue on my network feed also cannot update the feed when im trying to change the text file.

Re: Questions about Network Feed

JimmySnow — Thu, 21 Mar 2024 02:02:46 GMT

Dear Sir,

We observed that although it showed our gateways failed to update the network feed, our gateways did update the network feed successfully. You can check your gateways after the update periods.