topic Re: Unable to Download Policy from Smart-1 Cloud to Spark in Spark Firewall (SMB)

Unable to Download Policy from Smart-1 Cloud to Spark

TSOL — Wed, 20 Nov 2024 09:19:24 GMT

Hello Team

We are planning to connect Quantum Spark to Smart-1 Cloud for policy and log management.

Currently, as part of our testing, we have connected a Spark 1900 R81.10 device to Smart-1 Cloud. The Security Management Server status shows as "Connected," and the IP address is displayed as 100.64.XX.XX, which suggests that the device is properly connected to Smart-1 Cloud. However, we are experiencing an issue with fetching the security policy.

The following message is displayed:
"Previous policy installation failed: Unable to fetch the Security Policy from the Management Server."

Could you advise on what steps we should take to troubleshoot this issue?

Our current setup is as follows:

Quantum Spark ⇒　L3SW　⇒　FW　⇒　internet 　⇒　Infinity-portal

We would greatly appreciate any advice. Thank you in advance.

Re: Unable to Download Policy from Smart-1 Cloud to Spark

G_W_Albrecht — Wed, 20 Nov 2024 10:18:45 GMT

Quantum Spark is not facing the internet but has a FW in between ? No logs showing drops there ? The Management Token had been accepted by the Spark, and trust with Cloud-1 SMS was successfully established ?

Re: Unable to Download Policy from Smart-1 Cloud to Spark

TSOL — Wed, 20 Nov 2024 10:44:21 GMT

Thank you for your reply

My Spark is established with the Smart-1 Cloud SMS. Since there are no restrictions on traffic from the Spark segment to external networks on the firewall, it doesn't seem to be blocked by the firewall.

Re: Unable to Download Policy from Smart-1 Cloud to Spark

G_W_Albrecht — Wed, 20 Nov 2024 13:12:49 GMT

And the Spark WebGUI Security Management tab looks like what ?

Re: Unable to Download Policy from Smart-1 Cloud to Spark

Chris_Atkinson — Wed, 20 Nov 2024 13:20:43 GMT

Please confirm the exact firmware version and build used for the 1900?

Re: Unable to Download Policy from Smart-1 Cloud to Spark

TSOL — Thu, 21 Nov 2024 00:23:22 GMT

Thank you for your reply.

On the SPARK side, it seems that connections other than those related to the policy were successful.
Additionally, this screen is a translation of my language, so the wording may differ from the original.

Re: Unable to Download Policy from Smart-1 Cloud to Spark

TSOL — Thu, 21 Nov 2024 00:32:48 GMT

Thank you for your reply.

The version of SPARK is as follows.

Re: Unable to Download Policy from Smart-1 Cloud to Spark

Chris_Atkinson — Thu, 21 Nov 2024 02:07:24 GMT

You can try the current build which is 996002993 available from sk181080, otherwise I would consider consulting TAC here.