topic Re: SIC with dynamic address 1530 in Spark Firewall (SMB)

SIC with dynamic address 1530

Marcus_Halmsjo — Wed, 18 May 2022 08:09:40 GMT

Hi,

I am having some issues getting SIC to work with DAIP 1530 and hoping someone has any pointers.

Starting SIC works but after 1530 has started the connection and 1530 is pulling policy it fails.
If i test communication status on 1530 it is green and management server name is shown.
status on gateway object in management is "Trust established" but if i test sic status it says:

SIC Status for GW: Not Communicating

Peer sent wrong DN: CN=c*****.*7** Reset SIC from peer, and establish trust again. **

If i change gateway object to static and sets currect IP SIC works fine on all tests and 1530 can pull policy.

It there some something more to do with DAIP gateways, tried searching SKs and check the admin guide and can't really find anything that notes DAIP limitations.

Management is R81 jumbo 58 and SMB is 1530 with R80.20.02

Re: SIC with dynamic address 1530

Marcus_Halmsjo — Wed, 18 May 2022 08:28:19 GMT

Used wrong external NAT IP for management on the gateway when establishing SIC, when i used the IP that was set under NAT on management object it worked.

Re: SIC with dynamic address 1530

G_W_Albrecht — Wed, 18 May 2022 08:44:41 GMT

Firmware R80.20.02 is rather outdated ! I would suggest at least fw1_vx_dep_R80_20_40_992002665

Re: SIC with dynamic address 1530

Marcus_Halmsjo — Wed, 18 May 2022 08:47:48 GMT

Indeed thanks for the reminder forgot it reverts to factory image on reset