topic Re: Platform Portal missing on VSX in General Topics

Platform Portal missing on VSX

Ruan_Kotze — Thu, 15 Apr 2021 10:57:42 GMT

Hi All,

I have a site running VSX, with one of the VS's running the IPSEC blade only (MAB not enabled) to which endpoint clients connect. As expected the clients gets a certificate warning when you set up the connection for the first time (the client does a HTTPS connection to the gateway as part of setting up the site).

Usually I would resolve this by installing a trusted certificate via the platform portal setting on the gateway properties. Problem is I can't find this setting, not on the VS or on VS0.

How does one resolve this in a VSX environment? All my searching have come up blank, I'm certain I'm missing something very simple.

Thanks,
Ruan

Re: Platform Portal missing on VSX

JanVC — Thu, 15 Apr 2021 12:00:13 GMT

Did you look there?

Re: Platform Portal missing on VSX

Ruan_Kotze — Thu, 15 Apr 2021 12:03:26 GMT

Hi Jan,

Unfortunately in this environment MAB is not enabled. Good to know it is an option though!

As mentioned in non VSX environments I resolve this by changing out the platform portal certificate, seems this is not an option with VSX then.

Re: Platform Portal missing on VSX

JanVC — Thu, 15 Apr 2021 12:08:06 GMT

And what about the "UserCheck" config more to the top on the same screenshot?

I know for a fact we didn't modify that cert but it shows the same as our MAB cert

Re: Platform Portal missing on VSX

Ruan_Kotze — Thu, 15 Apr 2021 12:12:52 GMT

That requires IA to be enabled, which is also not enabled in this environment. But you have given me an idea - What I will test is:

enabling either of the two blades
switching out the certificate
pushing policy
Test Site creation to confirm correct certificate
De-active blade activated in step 1
Push policy
Test site creation again to confirm the certificate is still in place

Thanks for responding and I will revert with my results!

Re: Platform Portal missing on VSX

JanVC — Thu, 15 Apr 2021 12:29:17 GMT

weird, we don't have IA enabled on that vs

Re: Platform Portal missing on VSX

Ruan_Kotze — Thu, 15 Apr 2021 13:00:02 GMT

Sorry that was my mistake, it's not related to IA.

I enabled Content Awareness to get access to the UserCheck portal and replaced the certificate with one trusted by the clients. Testing was successful, however once one disable the the relevant blade the certificate reverts back to the one signed by the internal Check Point CA.

I've got a ticket open with TAC now - will update the thread based on the outcome of that.

Re: Platform Portal missing on VSX

PhoneBoy — Thu, 15 Apr 2021 15:42:35 GMT

If you can change this in the Gaia UI, you can temporarily turn off VSX mode on the Gateway, make the appropriate changes, then turn VSX mode back on.

Re: Platform Portal missing on VSX

JiaHaoC — Wed, 02 Nov 2022 00:13:51 GMT

It seems I’m also facing the same issue. Have you had any luck with TAC? Couldn’t find any SK on this.

Re: Platform Portal missing on VSX

JiaHaoC — Sat, 05 Nov 2022 08:27:45 GMT

Seems like I've found the solution. Although there is an instance of Multi-Portal daemon running on VS0, it is actually not running. I simply needed to follow the Client's CA signed certificate steps in sk97648

Re: Platform Portal missing on VSX

agung3012 — Thu, 14 Mar 2024 12:09:43 GMT

is it that simple?
are there any side effects of temporarily turning off VSX mode on the Gateway, then re-enabling VSX mode ?

thankyou

Re: Platform Portal missing on VSX

PhoneBoy — Thu, 14 Mar 2024 15:13:51 GMT

Not that I've seen.
I would make certain no one is making changes to VSX objects while VSX mode is off, though.