Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
KM1895
Contributor
Contributor
Jump to solution

URLF and APCL are not responding

 

hi,

 

I have been working on a problem for a couple of days, and havent found any solution for this so far.

In Smartconsole, a cluster is listed with 

'URL Filtering' is not responding. Verify that 'URL Filtering' is installed on the gateway. If 'URL Filtering' should not be installed verify that it is not selected in the Products List of the gateway (SmartDashboard > Security Gateway > General Properties > Software Blades List).
 
'Application Control' is not responding. Verify that 'Application Control' is installed on the gateway. If 'Application Control' should not be installed verify that it is not selected in the Products List of the gateway (SmartDashboard > Security Gateway > General Properties > Software Blades List).
 
I tried disabling the blades, installed policy, enabled them again and pushed policy. But the errors are still there.
It appears to be a cosmetic issue, as tests verify that the app/urlf layer is inspecting and blocking traffic correctly, but would like to get this message removed.
 
This is on a R80.30 cluster and a R80.40 mgmt server.
 
Does anyone have any input on this?
0 Kudos
1 Solution

Accepted Solutions
G_W_Albrecht
Legend
Legend

sk111944 suggests checking $FWDIR/appi/update/appi_status.C and cprestart.

CCSE CCTE CCSM SMB Specialist

View solution in original post

5 Replies
G_W_Albrecht
Legend
Legend

sk111944 suggests checking $FWDIR/appi/update/appi_status.C and cprestart.

CCSE CCTE CCSM SMB Specialist
KM1895
Contributor
Contributor

hi,

 

Yeah, i did the cpstop;cpstart on the standby node, as a test...the article stated it was valid up until 77.30, but thought it was worth a try. found some other issues as well, so ended up rebooting the cluster.

0 Kudos
I_Santos
Contributor
0 Kudos
_CP_Firewall
Contributor

Hi G_W_Albrecht,
We have maestro setup and we are facing the same issue.
Can we perform the same SK111944 ?

Please suggest.
R81.10 - JHF Take66 (Active/active but NOT VSX)

Regards;
Hasnain Ansari

0 Kudos
RobertSmeikal
Explorer

I had this exact issue as describe in sk111944 on the standby member of a R80.40 cluster on a 5100 and solved it by reboot (not the cpstop/cpstart procedure). However, it took the gateway unusually long to finish, about 6-7 minutes (normally 3 minutes).

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events