Questions about Network Feed

[JimmySnow]

Dear all,

We have started using R81.20 Network Feed.

We have one SMS server and  one cluster, including two gateways; all of them are R81.20

SMS: R81.20 take 8

GW: R81.20 take 10

We have set up Network Feed, and we can successfully test feed connectivity.

However, the result shows our gateways failed to update the network feed.

We checked the feed settings and found the certificate-id is missing, and it seems the certificate-id cannot be saved in the feed object

Is anyone encounter this problem?

If any one need more/detail information, please let me know

Thanks

====modified the post and add screenshot=====

1 After created the network feed, I clicked “Test Feed”

2 Then I clicked “Accept certificate anyway”

3 Then I clicked “Trust and Recheck”

4 The test result showed OK

5 Everything was fine here, the self-signed certificate was correctly when I moved mouse to the blue icon.

6 However, I found that after I clicked “OK” in Step 5. The feed did not change after 5 minutes. So, I checked the network, and the blue icon of signed certificate DISAPPEARED.

7 I used command line to show the feed, there is no certificate-id in it

8 Hence, I used command line to add certificate-id, and the certificate-id is in the feed

However, my network feed still cannot get the latest feed on my server, after I check my SMS, the network feed object on my SMS shows the same as Step 6

[PhoneBoy]

“We checked the feed settings and found the certificate-id is missing, and it seems the certificate-id cannot be saved in the feed object”

What precisely is meant by this?
Please provide a screenshot (sensitive details can be redacted).

[JimmySnow]

Dear Sir, 

Thank you for the suggestion, I have modified my post and added screenshot in it

[the_rock]

Im with Phoneboy here, not really sure what you mean by cert id is missing.

Andy

[JimmySnow]

Dear Sir, 

Thank you for replying my message, I have added screenshots

[the_rock]

Based on what you sent, to me anyway, seems like its working fine. Does it show green if you test it from smart console at this point?

Andy

[JimmySnow]

Yes sir, The test results are fine, like the fourth screenshot in my post

However, when I open the settings of the feed, it go back to the first screenshot, even though I have used command line to setup the certificated-id

[the_rock]

Works fine for me

Andy

[Expert@QUANTUM-MANAGEMENT:0]# mgmt_cli show network-feed name test-feed
Username: admin
Password:
uid: "3a4737ad-3427-4534-bbd7-20efe27b4293"
name: "test-feed"
type: "network-feed"
domain:
uid: "41e821a0-3720-11e3-aa6e-0800200c9fde"
name: "SMC User"
domain-type: "domain"
update-interval: 60
data-column: 1
feed-format: "Flat List"
feed-type: "IP Address"
custom-headers: []
feed-url: "https://list.***.******rk/checkpoint_threatlist.txt"
certificate-id: "1cdea6428f1587cc3f40516b48788f5512c3be0d"
ignore-lines-that-start-with: "#"
fields-delimiter: "\n"
use-gateway-proxy: true
comments: ""
color: "black"
icon: "NetworkObjects/NetworkFeed"
tags: []
meta-info:
lock: "unlocked"
validation-state: "ok"
last-modify-time:
posix: 1692326114650
iso-8601: "2023-08-17T22:35-0400"
last-modifier: "admin"
creation-time:
posix: 1692326114650
iso-8601: "2023-08-17T22:35-0400"
creator: "admin"
read-only: false
available-actions:
edit: "true"
delete: "true"
clone: "not_supported"

[Expert@QUANTUM-MANAGEMENT:0]#

[JimmySnow]

The problem is really tricky

In this environment, command line shows OK, but my SMS always shows the 6th screenshot when I open the settings of the network feed, and my gateways cannot get the feed correctly...

I have tried created different network feed objects, reboot my SMS server, set network feed object by command line, but the results are the same...

Also, I am planning to update to take 24 and test again...

Any ideas where I can check and modify to fix this problem?

[the_rock]

Im on take 26, latest one. Maybe TAC case would be good idea.

[Jayves]

may i know if you still encounter this issue? i have same issue on my network feed also cannot update the feed when im trying to change the text file.

[JimmySnow]

Dear Sir,

We observed that although it showed our gateways failed to update the network feed, our gateways did update the network feed successfully. You can check your gateways after the update periods.