Regenerate Token for MaaS Tunnel

[RemoteUser]

Hi everyone,

Today I was trying to regenerate the token for the MaaS tunnel, but I noticed that the "Connect Gateway" field  where the token regeneration was previously done has been removed.

Does anyone know where this can be done now in Smart-1 Cloud R82?

Thanks a lot!

[the_rock]

Let me check bud and will send you a screenshot.

Andy

[the_rock]

I see what you are saying brother. I dont see it either in R82, but used to be when you log into the portal, under gateways and servers.

Andy

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-...

[RemoteUser]

---

Hi brother,
Yes, but my question is: why did Checkpoint make such a change without documenting it?
This is something important... or did I miss this change in some documentation?

Thanks!

[the_rock]

Let me look into it more soon, its really bugging me as well.

Andy

[the_rock]

Question...what if you right click on the gateway in smart console, does it give option for "connect"?

Andy

[Dmitrie_Shaiman · Accepted solution]

Hi,

To regenerate the token, please follow these steps:

1. Click on Options (as shown in the attached image).

2. Select "Reset the connection token"

[the_rock]

The wording is super confusing, in my personal opinion. What you sent @Dmitrie_Shaiman is indeed much better, BUT, I checked in R82 S1C for 6 of our customers and for every single one, there are 4 options:

test

edit

reset

and delete

Well, to someone not so CP savvy, reset would probably indicate resetting SIC, not token.

Plus, this is not shown anywhere in R82 admin guide for S1C either, so definitely should be updated.

Andy

[Dmitrie_Shaiman]

The admin guide will be updated shortly.

[the_rock]

Thank you! And based on what @RemoteUser had said, I really believe if you guys brought back the old method for regenerating tokens, would be so much more simple. Dont get me wrong, change is great, but in this case, old way was so much more user friendly and logically, as far as Im concerned, so much more intuitive.

Just my take.

Andy

[RemoteUser]

Hi @Dmitrie_Shaiman 

Could you please update the guide soon? I'm a bit lost these days, as there’s no documentation available to follow.
and it's important also for all colleagues who are using the S1C...

Thanks in advance
Best regards

[the_rock]

It would help anyone using S1C, for sure 🙂

[RemoteUser]

this doesn't impact the sic, let say that i want to generate only to maas tunnel, for an existing gateway..

[the_rock]

Hey bro,

Thats what it sounds like to me, cause SIC would usually be reset from streamed smart console (option at the bottom of the page once you are logged into S1C mgmt portal).

Andy

[Mk_83]

Hello,

I'm unable to click the "Options" to regenerate token:

And when using SmartConsole, the whole Device field is not avalable:

Do you have any ideals about this issue?  We have critical because without this Checkpoint can't go to production.

Already open with TAC #6-0004359205, and still no luck.

Best Regards.

[the_rock]

You need to use streamed smart console.

[RemoteUser]

I think the issue is because it’s an SMB. In the first screen it appears in the streamed SmartConsole.
It looks like it’s in a read-only privilege and not write.

[the_rock]

It says to edit it, you must use smart console.

[Mk_83 · Accepted solution]

Thanks for your response.

Yeah, it's only happen for SMBs, other appliances using Gaia OS still fine.
I already using Smart console app on my computer, and even tried streamed smart console, but it's don't have the Device field to generate token:

 

Token only can generate using Smart-1 Cloud in Infinity portal, this option is not available on the Smart Console.

Resolved: TAC modified something in the our smart-1 cloud management services backend, and after services restarted the SMB GWs not get locked anymore, I able to regenerate token right now.

Thanks.

 

[RemoteUser]

Great

[the_rock]

Yes, its definitely different than older versions.

Andy