Connection lost.

[Matlu]

Hello, Mates

From one moment to the next, my CP device has lost connection, this is what I can see as an alert in the SmartConsole.

The device is connected to a Smart-1 Cloud.

In which file is the reason for the disconnection of the device saved?

Is it possible to read it? 

Is there any way to know since when connectivity was lost?

Thanks for your comments.

[the_rock]

Hey bro,

Can you see if it actually shows connected from the portal itself? Make sure routes are correct.

Andy

[Matlu]

It's weird

I try to resynchronize, and when I put the new pass in the GW object in the SmartConsole, the change does take effect, but then when you hit OK to close the window and install policies, the SIC is lost again.
And this is a repeated error.
My SMS is a Smart-1 Cloud.

In which file can you check the errors by SIC?

[the_rock]

Sounds like routing possibly...you can check cpd.elg in $FWDIR/log

[_Val_]

Best to open a TAC case

[RemoteUser]

What about maas status?

[RemoteUser]

Take a look here:
https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-...

[Lesley]

Is this a new gateway and it never worked? Or was it always stable and it just came?

Worth checking if you see any dropped traffic between mgmt and gateway. You can also tcpdump on the gateway and filter on mgmt IP to check if you see traffic coming in when you press the SIC test button 

But it is also Smart-1 cloud, so then indeed TAC case if this is not a fw issue (any other fw's in this mgmt with issues or not?) 

[Matlu]

Hi

It was working fine, from one moment to the next it has been out of sync

I have tried repeatedly to reset the SIC, for a moment it takes effect, but before I manage to install the policies, the connection is lost again.

The tcpdump, what IP and port should it be pointing to if your manager is a SMART-1 Cloud?

In which file do you normally save the connection errors of a GW with a SMART-1 Cloud?

Is it possible to interpret it yourself?

Thanks

[the_rock]

In smart console, object itself would have 100.x.x.x IP, but VIP would come from your ISP range.

Andy