Unable to access WebUI after policy installation

[AdaCoul]

Hi Everybody, I'm being unable to access GAIA WebUI after policy installation. We have a 3200 Appliance for our internal use (we're making tests with it). In the SmartDashbord, when I define a rule that has source or destinatination the "gateway" objet or the internal "network" objet, I'm being automatically disconnected to GAIA WebUI and I can't access it anyway. But if I define a rule which source and destination are "any", I'm able to access WebUI once again. Need assistance ! Thanks,

[_Val_]

Please make sure Platform Portal is properly defined on the GW object in the SmartConsole

[AdaCoul]

Hi Val,

Tank you for your assistance !

Platform Portal is properly defined, I verified it

[Daniel_Taney]

If you edit the Gateway Properties and go to Network Management, is your topology and anti-spoofing defined correctly? (I.e. External Interfaces that lead to the Internet vs. Internal ones?) Do you see anything in your FW logs when the connection gets dropped?  

I know you said you checked the Platform Admin Web Portal settings, but did you also check the settings under "Accessibility" on that screen. You can alter the access to All Interfaces, Internal Interfaces, or According to Firewall Policy. 

[AdaCoul]

Hi Daniel,

All topology and anti-spoofing configs are defined correctly. eth1:192.168.2.2 leads to the Internet and eth2 : 10.10.10.1 leads to the Internal Network. Firewall is not put into the nework, my pc is connected to management interface.

"Accessibility settings are defined on "According to Firewall Policy".

[Vladimir · Accepted solution]

You are describing two network interfaces: eth1- External and eth2-Internal.

You are also stating that the laptop is connected to a Management interface.

Please list the properties of the Mgmt interface as well.

In your rulebase, specify on very top:

Source (IP or Network of your Laptop), Destination (Gateway Object) sshv2 and HTTPS, Accept, Log

Try it again.

Check the logs for drop reasons if still happening and post it here.

Cheers,

Vladimir

[AdaCoul]

Hi Vladimir,

It's working now !

The firewall was blocking https and ssh connections.

Thanks a lot !

[Vladimir]

You are quite wlcome.