topic Re: Appliance 1490 R77.20.87 build 150 in Spark Firewall (SMB)

Appliance 1490 R77.20.87 build 150

firebird — Mon, 14 Aug 2023 16:30:49 GMT

Hi, have identified two issues with my CP1490 local managed. R77.20.87 Build 150

1st. I have noticed, that randomly and mostly occurs after a month of firewall uptime, the following warning message.

daemon.warn dnsmasq[4653]: Maximum number of concurrent DNS queries reached (max: 150)

I do have a TAC case and appears there are other two cases of similar issues but on R81. Does not seem to affect my traffic at all.

2nd. I use WatchTower app, when I login where you can click on protected devices. I see the list of my devices but beside them have a ?. When I try to access it, in past it used to bring some details of the device, now I get gateway not reachable but also on my system logs get the following error msg.

user.err root: [System error] CODE_SYS_ERROR (000.000.000) - /usr/local/share/lua/5.1/sys/LCM.lua:0: Can not call controller method: wirelessHostMonitor:getWirelessHostMonitorData not found. (Log reference: 1689420473)

One note to make is as am currently working through the upgrade to appliance, the current CP1490 no longer has any blade SS. so it's just basic firewall and wondering for that to work in past as it did I had the IPS blade enabled?

thoughts?

Re: Appliance 1490 R77.20.87 build 150

G_W_Albrecht — Thu, 17 Aug 2023 08:25:57 GMT

What firmware is this, R77.20.87 (990173120) ?

Re: Appliance 1490 R77.20.87 build 150

firebird — Thu, 17 Aug 2023 12:07:58 GMT

No, am using a custom firmware above B120 GA. r77.20.87 B150 contains additional fixes and some critical vulnerabilities beyond B120.

Re: Appliance 1490 R77.20.87 build 150

Chris_Atkinson — Thu, 17 Aug 2023 12:59:08 GMT

The IPS & Threat blades generally require a license for use/updates. It's unclear if this is related and should be verified with TAC.

Re: Appliance 1490 R77.20.87 build 150

firebird — Thu, 17 Aug 2023 12:38:23 GMT

Thanks, am aware that blades require SS. Question is specific to WatchTower error per above is it by design due to not have the blades enabled? Have a TAC

Re: Appliance 1490 R77.20.87 build 150

G_W_Albrecht — Thu, 17 Aug 2023 13:05:07 GMT

Is there a valid support contract on the box ? If not, WatchTower and ReachMyDevice may not work...

Re: Appliance 1490 R77.20.87 build 150

firebird — Thu, 17 Aug 2023 14:15:59 GMT

There is the firewall licenses and other services that never expire but I no longer have SS on blades. WatchTower continues to operate and alert on push notifications when devices connect as it should, firewall license is never expire. The issue here is when it sees the devices it now has a ? beside it and attempting to look at it, causes the error, that maybe related to no blades enabled. However, to reach the device and so forth should not be impacted.