topic Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993 in Spark Firewall (SMB)

Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

velo — Wed, 14 Aug 2024 10:21:33 GMT

I have a number of SMB1500 appliances, all running on 81.10.10.

As per sk182459

I have have upgraded to 81.10.10 build 996002993. I have only done this one one firewall to test the image.

After the upgrade, gaia web interface doesn't work anymore (SSH works)

I'm seeing the following in /var/log/messages

2024 Aug 14 10:49:43 EDIWSE daemon.info thttpd: [my source IP] connection timed out reading

I have a ticket open with Checkpoint , no joy yet.

Thanks

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

PhoneBoy — Wed, 14 Aug 2024 13:15:45 GMT

What happens on the client when you connect to https://device-ip:4434?
I didn’t experience this issue when upgrading to this version.

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

Chris_Atkinson — Wed, 14 Aug 2024 13:23:41 GMT

Does the issue persists regardless of browser choice or source address?

I also didn't see this issue post upgrade to this build.

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

velo — Wed, 14 Aug 2024 13:42:43 GMT

You get:

Hmmm… can't reach this pageThe connection was reset.
Try:

ERR_CONNECTION_RESET

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

velo — Wed, 14 Aug 2024 13:45:02 GMT

Yes same behaviour, even when in incognito mode.

To add a bit more detail.

I upgraded the firewall and it came up fine, also the VPN back to main location.
I noticed management wasn't working via public IP, but it was working via LAN IP over VPN.
I rebooted the Gateway again, then it stopped working completely.

I can access the firewall via SSH on public and LAN IP.

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

Naama_Specktor — Wed, 14 Aug 2024 13:54:24 GMT

Hi @velo ,

My name is Naama Specktor, and I am checkpoint employee.

I will appreciate it if you share TAC SR# , here or in DM.

thanks in advanced,

Naama Specktor

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

the_rock — Wed, 14 Aug 2024 13:54:50 GMT

I dont work much with SMB, but from clish, can you run show web ssl-port?

See what port it shows. Locally or centrally managed?

Andy

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

velo — Wed, 14 Aug 2024 14:09:12 GMT

Hi Naama

I sent you the ticket number. (I got some error when sending the DM so let me know if you don't get it)

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

velo — Wed, 14 Aug 2024 14:31:26 GMT

That command doesn't work but if you do show admin-access it shows it on port 4434 (correct port)

web-access-port: 4434

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

Pauli — Mon, 19 Aug 2024 09:22:31 GMT

@velo

Since we are also about to update:
Have you solved the problem?

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

velo — Mon, 19 Aug 2024 09:25:28 GMT

Nope, same issue and not luck with Checkpoint TAC yet.

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

velo — Tue, 20 Aug 2024 16:13:11 GMT

TAC have told me I need to rebuild the whole firewall which is not good.

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

the_rock — Tue, 20 Aug 2024 16:25:35 GMT

Thats not great news...just curious, was there any debugging done?

Andy

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

velo — Wed, 21 Aug 2024 07:52:45 GMT

Not much at all. For that reason I asked if the case can be escalated. Let's see.

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

Amir_Ayalon — Wed, 21 Aug 2024 07:56:26 GMT

please share the SR number and R&D will have a look

amiray@checkpoint.com

Re: Quantum Spark SMB Gaia not working after 81.10.10 Build 996002993

velo — Wed, 21 Aug 2024 08:03:09 GMT

DM Sent.. Thanks.

Part of me thinks maybe policy is corrupted.