Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Anton_Kazantsev
Contributor

No items found in SmartConsole

Strange behavior on my r80.10 gateway. I logged in SmartConsole and saw this:

Has anyone encountered this situation ?

18 Replies
Dmitry_Krupnik
Employee Alumnus
Employee Alumnus

Hello Anton,

Tell me please, are you using the R80.10 GA or latest JHF has been installed?

Please, take a look this thread and comment from Eran, looks like related.

Regards,

Dmitry.

0 Kudos
Anton_Kazantsev
Contributor

Hello, thnx 4 reply. 

Its not a cosmetic issue, because I cant install policy. But I see the policy itself and can change and publish it. Also I see gateway in smartmonitor console

Some screens form Gaia and policy install UI

0 Kudos
Dmitry_Krupnik
Employee Alumnus
Employee Alumnus

Anton,

Let me check it internally.

Could you found the GW object in the Network Object list? If yes, please add the GW to "Standard" policy manually:

After it, create a new object (host, for example), perform publish and policy installation. 

Regards,

Dmitry.

0 Kudos
Anton_Kazantsev
Contributor

I added GW object, but policy install dont see it

 

0 Kudos
Dmitry_Krupnik
Employee Alumnus
Employee Alumnus

Anton,

The "fpfw-mobile" is GW, right? Could you also provide the same screen from MGMT WebUI.

Do I understand correctly, logout from SmartConsole and re-login doesn't help? 

Regards,

Dmitry.

0 Kudos
Anton_Kazantsev
Contributor

its a standalone, MGMT anf GW in one 

0 Kudos
Dmitry_Krupnik
Employee Alumnus
Employee Alumnus

Anton,

I see, thank you. I suggest to open the task in the TAC at the same time with my internal investigation. Please, send a number of this task to email, which you can find in the my profile.

 

Do I understand correctly, logout from SmartConsole and re-login doesn't help? 

Regards,

Dmitry.

0 Kudos
Anton_Kazantsev
Contributor

It doesn't

Relogin, discard changes, reboot, nothing help

I dont have support for this GW( 

Timothy_Hall
Champion
Champion

How many CPU cores and how much RAM is available on this standalone system?  Also the disk is not full right?  df -h to check.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos
Anton_Kazantsev
Contributor

Let's see

4 CPU cores with 4Gb RAM

And df output 

# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current
17G 9.6G 6.4G 61% /
/dev/sda1 289M 37M 237M 14% /boot
tmpfs 1.9G 4.0K 1.9G 1% /dev/shm
/dev/mapper/vg_splat-lv_log
39G 23G 14G 63% /var/log

seems good?

Timothy_Hall
Champion
Champion

No, minimum requirements for a standalone deployment under R80.10 is 2 cores and 6GB RAM.  Please see R80.10 release notes.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos
Anton_Kazantsev
Contributor

Ok, I increase RAM to 6Gb

# free
total used free shared buffers cached
Mem: 5966724 5344676 622048 0 69920 2393936
-/+ buffers/cache: 2880820 3085904
Swap: 3140696 0 3140696

nothing changed (

Maybe upgrade to 80.20 can help or reset sic 

0 Kudos
PhoneBoy
Admin
Admin

Actually it’s 8GB for a standalone (FW + MGMT) in R80.x, but I’d probably use 16GB.

0 Kudos
Anton_Kazantsev
Contributor

No matter, I changed to 8 

0 Kudos
Alessandro_Marr
Advisor

Did you check your smart  console version?

did you change any roles to  your user admin?

0 Kudos
Anton_Kazantsev
Contributor

SC version:

 

Rights:

0 Kudos
Anton_Kazantsev
Contributor

Found this 

[Executing:]# fw fetch cpwf-r77; fw stat

Fetching FW1 Security Policy From: cpwf-r77

Management rejected fetch for this module - sic name does not match.
Policy Fetch Failed

Maybe SIC.  I'll Check it out

0 Kudos
Anton_Kazantsev
Contributor

And found the way how to install policy from api

[Expert@cpwf-r77:0]# mgmt_cli install-policy policy-package "standard" access true threat-prevention false targets.1 "cpwf-r77" --format json
Username: admin
Password:


---------------------------------------------
Time: [21:36:41] 15/2/2019
---------------------------------------------
"Policy installation - Standard" in progress (0%)


---------------------------------------------
Time: [21:36:51] 15/2/2019
---------------------------------------------
"Policy installation - Standard" in progress (50%)


---------------------------------------------
Time: [21:37:01] 15/2/2019
---------------------------------------------
"Policy installation - Standard" succeeded (100%)
{
"tasks" : [ {
"uid" : "6f7e20cd-16f1-49aa-b13b-40701fbb898e",
"type" : "task",
"domain" : {
"uid" : "41e821a0-3720-11e3-aa6e-0800200c9fde",
"name" : "SMC User",
"domain-type" : "domain"
},
"task-id" : "82fdae92-a9f7-404a-a5c2-f75d5cb8a4a8",
"task-name" : "Policy installation - Standard",
"status" : "succeeded",
"progress-percentage" : 100,
"start-time" : {
"posix" : 1550248598869,
"iso-8601" : "2019-02-15T21:36+0500"
},
"last-update-time" : {
"posix" : 1550248614988,
"iso-8601" : "2019-02-15T21:36+0500"
},
"suppressed" : false,
"task-details" : [ {
"uid" : "ea5018dd-c31b-4f4d-8a78-5428b83fff8f",
"name" : null,
"domain" : {
"uid" : "41e821a0-3720-11e3-aa6e-0800200c9fde",
"name" : "SMC User",
"domain-type" : "domain"
},
"color" : "black",
"statusCode" : "succeeded with warnings",
"statusDescription" : "Succeeded with Warnings",
"taskNotification" : "6f7e20cd-16f1-49aa-b13b-40701fbb898e",
"gatewayId" : "4e95a5b1-01bb-204f-9142-c906642fe179",
"policyId" : "e095dc17-7496-4a8e-96b1-1687395b10b5",
"runningStages" : [ ],
"waitingStages" : [ ],
"stagesInfo" : [ {
"type" : "warn",
"stage" : "legacy policy load",
"messages" : [ {
"type" : "warn",
"message" : "Anti-Spoofing is not configured for some interfaces and gateways. This will allow address spoofing through these gateways.,,Anti-Spoofing should be configured on the following objects:,.Gateway: cpwf-r77, Interface: eth3,."
} ]
} ],
"cluster" : false,
"meta-info" : {
"validation-state" : "ok",
"last-modify-time" : {
"posix" : 1550248613863,
"iso-8601" : "2019-02-15T21:36+0500"
},
"last-modifier" : "System",
"creation-time" : {
"posix" : 1550248599106,
"iso-8601" : "2019-02-15T21:36+0500"
},
"creator" : "System"
},
"tags" : [ ],
"icon" : "General/globalsNa",
"comments" : "",
"display-name" : "",
"customFields" : null,
"gatewayName" : "cpwf-r77",
"revision" : "d621174f-f404-4ebb-82ea-910bac0d7dad"
} ],
"comments" : "Installation succeeded on cpwf-r77",
"color" : "black",
"icon" : "General/globalsNa",
"tags" : [ ],
"meta-info" : {
"lock" : "unlocked",
"validation-state" : "ok",
"last-modify-time" : {
"posix" : 1550248615005,
"iso-8601" : "2019-02-15T21:36+0500"
},
"last-modifier" : "System",
"creation-time" : {
"posix" : 1550248598871,
"iso-8601" : "2019-02-15T21:36+0500"
},
"creator" : "admin"
},
"read-only" : false
} ]
}

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events