- Products
- Learn
- Local User Groups
- Partners
- More
Introduction to Lakera:
Securing the AI Frontier!
Quantum Spark Management Unleashed!
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
SharePoint CVEs and More!
Hi all.
I'm having this weird situation where I can remote save backups (via scp) and could not remote save snapshot (via scp) from gaia to a solarwind scp server hosted on a windows server.
I can also scp files from out to scp server.
I have included the rsa ssh key in the known_hosts.
Able to advise me?
On the /var/log/message, there an error saying the need to validate connection.
While on the scp server, the logs were "logon unknown authenticated user x from IP z.z.z.z"
I do not have service contract. So unable to view kb which are advanced and above.
Forgive me for the lack of info, I am typing all this from memory. Will update more info tomorrow.
*edit* I used solarwind scp server. Don't know if this will helps
There's a few search results for that, one of them being to remove and re-add the SSH feature on the Windows server. So that might be worth a go.
Hey @xchan014
Are there any logs in smart console you can send that are related to this, please?
Andy
Which log can I look into?
CPbackup.elg doesn't seem to show it
Is there anything in smart console logs at all?
Andy
Sorry. I am not quite sure what you mean by smart console logs.. is it traffic logs?
Other than firewall rule allowed for port 22. Nothing related to scp is found.
Yes, sorry, thats what I meant.
Andy
From the logs it looks like a wrong user name or using wrong credentials. Can you share the exact entry from /var/log/messages?
Sometimes file size limitation on the target host is the problem. Can you verify with a linux target as SCP server? Or even generate a big file ("fallocate -l 4g test.file") and transfer that manually via SCP? But that does not match exactly to what you wrote about the log messages.
Yes...I also think it might be worth confirming the content of /etc/ssh/ssh_config to see which user is used for scp backup.
Andy
I am able to use SCP commands to save a file to a remote scp server on windows server. But it fail when using " set snapshot-onetime export" or via scheduled remote save snapshot from Gaia.
Let me see if I can replicate the issues on a separate VM at home after work tonight.
*Edited* I have tried using Linux as a SCP server. It seem to work as the error return is different. It's complaining about space in /var/log after using snapshot-onetime. I assume that it work after resolving that space issue problem. It seem that windows does not play nicely with Linux.
I have question generally on how saving snapshot remotely via scp works.
Do I need to have enough space locally on the gaia despite saving the snapshot remotely?
I have fully working R82 lab, so can try reproduce this tomorrow.
Best,
Andy
Try SSH'ing to the server from the gateway that you're trying to save it to, and accept the fingerprint.
Excellent idea, that should work.
Hi enmap.
I have tried what you have suggested. I got shell request failed on channel 0.
Does this mean that the issue is at the windows scp server side?
To me, personally, thats what it looks like...
There's a few search results for that, one of them being to remove and re-add the SSH feature on the Windows server. So that might be worth a go.
Hi. I think you are right that i should reinstall openssh-server. I try using an ftp server preinstalled in window server and it give off an expected error.
I also just found out from solarwind webpage that their scp server cannot transfer anything more than 4gb. This maybe be the reason why scp backup can and not scp snapshot.
Thanks, enmap.
Glad you got it working!
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
11 | |
11 | |
8 | |
7 | |
7 | |
7 | |
7 | |
6 | |
6 | |
5 |
Thu 25 Sep 2025 @ 03:00 PM (IDT)
NIS2 Compliance in 2025: Tactical Tools to Assess, Secure, and ComplyThu 25 Sep 2025 @ 03:00 PM (IDT)
NIS2 Compliance in 2025: Tactical Tools to Assess, Secure, and ComplyThu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY