topic Re: SIC in General Topics

SIC

jus_soul — Mon, 25 Nov 2024 11:41:13 GMT

Hello! I have some problem with install unified policy. When I want to install policy on A-GW and B-GW, I got errors: Layer "DMZ traffic": The Intranet Community member A-GW must have a signed certificate and Policy verification failed on both gateways.

How I can fix this error?

Thank you for your helping!

Re: SIC

_Val_ — Mon, 25 Nov 2024 11:49:55 GMT

You need SIC to be established before you can install policy. Go to that GW object and establish SIC.

Re: SIC

jus_soul — Mon, 25 Nov 2024 11:51:50 GMT

I did it, but it still gives an error. I reset SIC, then enter new OTP, but nothing

Re: SIC

jus_soul — Mon, 25 Nov 2024 11:54:54 GMT

Thank you for your answer, but but it still gives an error. We already have trust established

Re: SIC

Tal_Paz-Fridman — Mon, 25 Nov 2024 12:09:54 GMT

It seems that for some reason the Security Gateway in the Community does not have a certificate.

You might want to try to add or renew the VPN Certificate (or enable / disable IPsec VPN Blade):

Security Gateway object > IPsec VPN > Add or Renew

Re: SIC

the_rock — Mon, 25 Nov 2024 13:22:03 GMT

I would certainly verify what both @Tal_Paz-Fridman and @_Val_ mentioned. Dont worry about warnings, you can ommit those for now, as they never cause policy to fail, its the actual error.

Andy

Re: SIC

_Val_ — Mon, 25 Nov 2024 14:29:30 GMT

@jus_soul, please do what @Tal_Paz-Fridman suggests. It seems A-GW does not have a VPN certificate.

Re: SIC

the_rock — Mon, 25 Nov 2024 14:29:47 GMT

Did you try what @Tal_Paz-Fridman suggested? To me, it implies cert might be expired. Lets do quick remote if you are allowed and I can check it for you.

Andy

Re: SIC

Lesley — Mon, 25 Nov 2024 16:59:29 GMT

Note that you need vpn cert even if you do not have vpn blade enabled. If so temporarily enable vpn blade renew cert and disable blade again.

Re: SIC

the_rock — Mon, 25 Nov 2024 17:25:31 GMT

Very true!