topic SMB full back up login problem in Spark Firewall (SMB)

SMB full back up login problem

marcinw — Thu, 26 Nov 2020 13:13:43 GMT

HI,

I created backup on SMB 1550 that was connected via VPN to SMS in Azure, I took the 2nd 1550 and uploaded this backup onto this one. When I plug in the 2nd 1550 into the network VPN tunnel is created automatically, I don't have to even re-establish SIC , that is fine. The only problem is I can't log onto device I tried credentials from from "backuped" 1550 also from the 2nd... no joy .

I see the message on the login screen (Operation failed server error)

DO someone know how to fix it? Thanks

Re: SMB full back up login problem

PhoneBoy — Fri, 27 Nov 2020 04:13:44 GMT

Might want to get the TAC involved here

Re: SMB full back up login problem

Tom_Hinoue — Fri, 27 Nov 2020 06:09:17 GMT

Are both 1550's have same firmware version and build number installed?
Such issue can occur if you restore a backup that is from a different version/build.

Re: SMB full back up login problem

marcinw — Fri, 27 Nov 2020 10:07:08 GMT

Good point! And you are absolutely right! not it's working . thanks

Re: SMB full back up login problem

G_W_Albrecht — Fri, 27 Nov 2020 10:14:40 GMT

Uhhh uhhhh.... Should that be possible at all ? Afaik in R77.20.xx, only same firmware version backups could be restored. Which versions led to he issue ?

Re: SMB full back up login problem

marcinw — Fri, 27 Nov 2020 10:17:44 GMT

I was able to upload backup from 80.20.15 to 80.20, everything was working the only issue was https access

Re: SMB full back up login problem

G_W_Albrecht — Fri, 27 Nov 2020 11:58:58 GMT

That just should not be possible - @Amir_Ayalon , @Vincent_Chu , what do you think ?

@PhoneBoy - can you move this to SMB ?

Re: SMB full back up login problem

Vincent_Chu — Fri, 27 Nov 2020 13:03:21 GMT

It's possible some validation checks before restoring a file are not running.

We started to support restore from R77.20.87 firmware on R80.20.15 officially. I know the gateway let you do it since initial release I think, but lots of things broken and maybe this is why the validation was left out.

I don't know if any changes will be made on the older builds but this might be something that can be reviewed moving forward.

Re: SMB full back up login problem

G_W_Albrecht — Fri, 27 Nov 2020 13:34:24 GMT

Looks like a good reason for the issue ! But strange that the credentials are not working - i would have assumed that R80.20 and R80.20.15 do not differ much in handling credentials...

Re: SMB full back up login problem

Vincent_Chu — Fri, 27 Nov 2020 14:20:35 GMT

The database is very delicate. Might have been something to do with the tables used changed.

between HFA10 and 0 there was a major change which was to add MFA for VPN users.

Maybe that caused a change in the user table. Just a guess here.