- CheckMates
- :
- Products
- :
- CloudMates Products
- :
- Cloud Network Security
- :
- Discussion
- :
- Re: Cloudguard Controller Error
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Cloudguard Controller Error
Hi
I have a recurring Error on the Dashboard - Management Server Device Status shows:
Cloudguard Controller - Error: 1 out of 1 Data Centers is disconnected.
I had previously resolved this error by renewing the Service Principal Authentication on the AzureDCObject. But this is not the problem this time as it's Connected and test connection works fine.
Azure Cloudguard R81.20 Jumbo Hotfix Take 26
Any clues?
Steve
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Anything interesting in the log: $FWDIR/log/cloud_proxy.elg
Note Take 41 also includes a new Cloud CA Bundle (sk172188).
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Only some old entries:
This recurred repeatedly until the October 25th
25/10/23 01:14:04,764 ERROR datacenter.scanner.DcScanner [scanner-Azure-1014943195]: Error during scan - attempting to reconnect for
scanner of [AzureDCObject] in domainID 41e821a0-3720-11e3-aa6e-0800200c9fde
com.checkpoint.datacenter.util.exception.UnknownProblemException: Failed querying Azure, unknown problem
at com.checkpoint.datacenter.scanner.azure.AzureDeployment.getAzureResponse(AzureDeployment.java:226) ~[cms.jar:?]
at com.checkpoint.datacenter.scanner.azure.AzureScanner.innerRun(AzureScanner.java:136) ~[cms.jar:?]
at com.checkpoint.datacenter.scanner.DcScanner.run(DcScanner.java:50) [cms.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:522) [?:1.8.0]
at java.util.concurrent.FutureTask.run(FutureTask.java:277) [?:1.8.0]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160) [?:1.8.0]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:1.8.0]
at java.lang.Thread.run(Thread.java:825) [?:2.9 (03-03-2022)]
25/10/23 01:14:04,764 ERROR scanner.util.DcScannerUtils [scanner-Azure-1014943195]: Exception while connecting to [AzureDCObject]. R
eturn unknown problem.
com.checkpoint.datacenter.util.exception.UnknownProblemException: Failed querying Azure, unknown problem
at com.checkpoint.datacenter.scanner.azure.AzureDeployment.getAzureResponse(AzureDeployment.java:226) ~[cms.jar:?]
at com.checkpoint.datacenter.scanner.azure.AzureScanner.innerRun(AzureScanner.java:136) ~[cms.jar:?]
at com.checkpoint.datacenter.scanner.DcScanner.run(DcScanner.java:50) [cms.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:522) [?:1.8.0]
at java.util.concurrent.FutureTask.run(FutureTask.java:277) [?:1.8.0]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160) [?:1.8.0]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:1.8.0]
at java.lang.Thread.run(Thread.java:825) [?:2.9 (03-03-2022)]
then after 25th only these ones...
25/10/23 16:32:54,517 ERROR checkpoint.datacenter.Main [main]: === starting up ===
07/11/23 13:04:17,220 ERROR checkpoint.datacenter.Main [main]: === starting up ===
-end-
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Other than what @Chris_Atkinson suggested, do you see any errors in SmartConsole logs with this filter?
blade:"CloudGuard IaaS" AND severity:Critical
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Nothing from that log filter...
Also, I've been uploading the log content from cloud_proxy.elg - just few lines - but the post keeps getting deleted... Any recommended way to do it?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Do you see successful scans of this Data Center if you remove the severity from the filter?
Any specific errors in cloud_proxy.elg? Not sure why is it not uploading for you.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There's this on SmartConsole Logs after i removed critical filter.
[Central License] VE-NGTP license pool core usage has exceeded the cores quota of the pool. The pool's total quota limit is 4, while the actual core usage is 8.
I did see there was an unclaimed licence on the Mngmt server which i added... now there is 4 + 4 cores licenced on the mgmt server. I would expect the above log to not return now but the original issue is still remaining.
Have tried attaching log entries on txt file. last few entries only, there's nothing recent there.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I think what guys suggested is best place to start. Can you please also attach a screenshot, if possible?
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Logs from cloud_proxy.elg... Nothing recent...
25/10/23 13:11:40,132 ERROR datacenter.scanner.DcScanner [scanner-Azure-1014943195]: Mapping of Data Center [AzureDCObject] failed . Next mapping is in 300 seconds.
25/10/23 13:37:10,895 ERROR util.process.ProcessExecutor [scanner-Azure-1014943195]: java.util.concurrent.TimeoutException
25/10/23 13:37:10,895 ERROR util.process.ProcessExecutor [scanner-Azure-1014943195]: Timeout reached: 1200 seconds, killing process
25/10/23 13:37:10,895 ERROR util.process.ProcessExecutor [pool-1806995-thread-1]: protectedWait: java.lang.InterruptedException
25/10/23 13:37:19,513 ERROR util.process.ProcessExecutor [Thread-302]: ProcessStreamReader: stderr - run: java.io.IOException: Stream closed
25/10/23 13:37:19,514 ERROR scanner.azure.AzureDeployment [scanner-Azure-1014943195]: com.checkpoint.datacenter.util.exception.ProcessExecutionException: Failed running process
25/10/23 13:37:19,514 ERROR datacenter.scanner.DcScanner [scanner-Azure-1014943195]: Error during scan - attempting to reconnect for scanner of [AzureDCObject] in domainID 41e821a0-3720-11e3-aa6e-0800200c9fde
com.checkpoint.datacenter.util.exception.UnknownProblemException: Failed querying Azure, unknown problem
at com.checkpoint.datacenter.scanner.azure.AzureDeployment.getAzureResponse(AzureDeployment.java:226) ~[cms.jar:?]
at com.checkpoint.datacenter.scanner.azure.AzureScanner.innerRun(AzureScanner.java:136) ~[cms.jar:?]
at com.checkpoint.datacenter.scanner.DcScanner.run(DcScanner.java:50) [cms.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:522) [?:1.8.0]
at java.util.concurrent.FutureTask.run(FutureTask.java:277) [?:1.8.0]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160) [?:1.8.0]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:1.8.0]
at java.lang.Thread.run(Thread.java:825) [?:2.9 (03-03-2022)]
25/10/23 13:37:19,514 ERROR scanner.util.DcScannerUtils [scanner-Azure-1014943195]: Exception while connecting to [AzureDCObject]. Return unknown problem.
com.checkpoint.datacenter.util.exception.UnknownProblemException: Failed querying Azure, unknown problem
at com.checkpoint.datacenter.scanner.azure.AzureDeployment.getAzureResponse(AzureDeployment.java:226) ~[cms.jar:?]
at com.checkpoint.datacenter.scanner.azure.AzureScanner.innerRun(AzureScanner.java:136) ~[cms.jar:?]
at com.checkpoint.datacenter.scanner.DcScanner.run(DcScanner.java:50) [cms.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:522) [?:1.8.0]
at java.util.concurrent.FutureTask.run(FutureTask.java:277) [?:1.8.0]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160) [?:1.8.0]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:1.8.0]
at java.lang.Thread.run(Thread.java:825) [?:2.9 (03-03-2022)]
25/10/23 13:37:19,514 ERROR datacenter.scanner.DcScanner [scanner-Azure-1014943195]: Mapping of Data Center [AzureDCObject] failed . Next mapping is in 300 seconds.
25/10/23 13:46:41,723 ERROR checkpoint.datacenter.Main [main]: === starting up ===
25/10/23 13:49:50,250 ERROR checkpoint.datacenter.Main [main]: === starting up ===
25/10/23 16:32:54,517 ERROR checkpoint.datacenter.Main [main]: === starting up ===
07/11/23 13:04:17,220 ERROR checkpoint.datacenter.Main [main]: === starting up ===
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
In order to fix these errors:
25/10/23 13:37:10,895 ERROR util.process.ProcessExecutor [scanner-Azure-1014943195]: java.util.concurrent.TimeoutException
25/10/23 13:37:10,895 ERROR util.process.ProcessExecutor [scanner-Azure-1014943195]: Timeout reached: 1200 seconds, killing process
You need to increase the value of azure.scannerInterval in vsec.conf. You can add 2-3 zeros to it. Then save the file and run "vsec stop ; vsec start" for it to take effect.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Screenshots
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
When you search for data center in the object list and then right click -> where used, what does it show?
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
"No usages found." I assumed it was there only to authenticate the updatable objects process with Azure.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If thats the case, I would say you can safely delete it, save (publish), install mgmt database and policy and Im positive error will be gone.
Best,
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks, I'll give it a go and update the thread
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Sounds good.
Andy
![](/skins/images/A53DAF99EDBAFE11A1FC6E62F510C235/responsive_peak/images/icon_anonymous_message.png)