topic Re: SMB Devices Retaining Proxy Settings in Spark Firewall (SMB)

SMB Devices Retaining Proxy Settings

Waldo — Thu, 07 Sep 2023 07:25:29 GMT

Hello,

I have a couple of SMB devices that have had proxy settings applied for them to go out to the internet for updates s/w upgrades etc. We have disabled the proxy settings in the WebUI but can definitively see that the gateways are still attempting to use the proxy for these connections.

We have a couple of older 1400s plus a couple of newer 1800s (R80.20) displaying this same behaviour.

Has anyone seen this before and, if so, is there a known fix?

Thanks

Re: SMB Devices Retaining Proxy Settings

G_W_Albrecht — Fri, 08 Sep 2023 08:44:13 GMT

Did you try using CLI ?

show proxy

set proxy disable

Re: SMB Devices Retaining Proxy Settings

Waldo — Fri, 08 Sep 2023 09:28:16 GMT

Yes, but no joy I'm afraid,

here's the CLI output which did not change after re-applying the set proxy disable command.

show proxy
use-proxy: false
port: 8080
server: proxy.xxx.local

Re: SMB Devices Retaining Proxy Settings

G_W_Albrecht — Fri, 08 Sep 2023 09:33:09 GMT

delete proxy

show proxy

Re: SMB Devices Retaining Proxy Settings

Waldo — Fri, 08 Sep 2023 10:31:09 GMT

Hi,

Thanks again for the suggestions... Deleting the proxy as suggested has removed any reference in the CLI to the old proxy which is a step forward for sure, however our internet gateway logs are still showing this internal gateway inside our network, trying to use our proxy server for connecting out to the internet. Apart from reloading the gateway which is quite onerous to organize, are there any other suggestions/ideas out there?

Thanks

Re: SMB Devices Retaining Proxy Settings

G_W_Albrecht — Fri, 08 Sep 2023 11:04:51 GMT

You mean reboot ? That might resolve it by deleting cached configuration. Other possibility is to contact TAC, maybe using chat, to get this resolved.

What you could also try is these two commands that will recompile and reload the policy without reboot (usually used on locally managed SMBs):

fw_configload

fw reconf_sfwd

Re: SMB Devices Retaining Proxy Settings

Waldo — Fri, 08 Sep 2023 11:42:23 GMT

Yes, I did mean reboot!😀

Thanks for the suggestions, all of which I will try. I will feed back the results here as well.

I appreciate your help GWA. Thank you.

Re: SMB Devices Retaining Proxy Settings

Waldo — Wed, 27 Sep 2023 12:58:50 GMT

G_W_Albrecht - Still struggling with this one... Can you advise how I invoke TAC on chat as you suggested earlier please?

Re: SMB Devices Retaining Proxy Settings

G_W_Albrecht — Wed, 27 Sep 2023 13:09:02 GMT

Go here: https://www.checkpoint.com/support-services/contact-support/ and click Chat with us. Then select Technical Support /Account Services and New Case. Select Technical and fill in the MAC as Asset.