topic Re: New Appliance in the Security Group in Hyperscale Firewall (Maestro)

New Appliance in the Security Group

ShadowNif — Tue, 03 Dec 2024 14:25:42 GMT

Hello,

I have a new appliance 9800 which i am trying to add to an existing Security group with 6800. After adding the new one, i am planing to remove the old ones.
I made sure that the Appliance and the MHO all on the newest TAKE and all running R81.20.
Although the new appliance came with the latest Clean installed take.

After drag and drop the new Appliance in the new Security group, the appliance keep rebooting, it starts a counter and then reboot and reboot, stuck in loop. And the first error to see in the booting is in the following Screenshot...

Re: New Appliance in the Security Group

Nir_Shamir — Tue, 03 Dec 2024 14:40:35 GMT

could be an issue with license.

add an eval to the appliance and check again.

Re: New Appliance in the Security Group

ShadowNif — Tue, 03 Dec 2024 14:44:16 GMT

The Security group works fine.and the License are there. You cannot add License to unassigned Appliance, because after attaching in to a security group it will be reset and actually should be under MHO and not as a single node.

Re: New Appliance in the Security Group

Nir_Shamir — Tue, 03 Dec 2024 15:11:57 GMT

I had the same issue and because there was no license on the appliance I got the same issue as you.

you can add a license on the sync IP address of that machine and check again.

Re: New Appliance in the Security Group

AkosBakos — Tue, 03 Dec 2024 17:02:31 GMT

Hi @ShadowNif

The SG is able to reach the internet? The newly added SGM wants to dowload the its own licence, and maybe this step is unsuccessful. The CP6800 has VALID license?

There is a discussion here.

And here is a bug, maybe are you facing with this?

https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Important-Notes.htm?tocpath=_____2

Akos

Re: New Appliance in the Security Group

ShadowNif — Wed, 04 Dec 2024 07:08:51 GMT

the appliance is not coming up. I cannt access it of anywhere. it stuck in the loop and not reachable from MHO.
Although it does not have an ip to be able to install any kind of EVL Lice.

Re: New Appliance in the Security Group

ShadowNif — Wed, 04 Dec 2024 07:13:42 GMT

I am on "Check_Point_R81.20_For_9000_Appliances_T786_Maestro" my next step is to install the JF but im not able to start the appliance after attaching it to the SG

Re: New Appliance in the Security Group

AkosBakos — Wed, 04 Dec 2024 07:39:30 GMT

Hi,

what can you see if you attach a serial console?

the appliance rebooting again and again?

akos

Re: New Appliance in the Security Group

emmap — Wed, 04 Dec 2024 07:45:02 GMT

You have auto-clone turned off, yes?