Smart 1-delete cluster

[RamiShahar]

Hi all,

I have 2 questions regarding Smart 1

1 ) Cluster object-I removed the GW's from the smart 1 webUI but when trying to delete the cluster from the smart console i get this error "failed to delete the object-Unknown error"

Since I don't have a GUI DB edit, is there a way to overcome the error and delete this cluster object?

2) when trying to send api from smart 1 management to the gw (through GAIA api) I get this error on the gw.

I use read and write mode.

Management sends traffic to the GW.

Is there another GW configuration to check?

Login and other API work fine

API : 

//https://{{smart1-server}}/web_api/v1.7/gaia-api/show-routes

Body : 

{

"target" : "fw_9.191"

}

Response :

{

"code": "err_gaia_api_send_command_failed",

"message": "Cannot send the command to the gateway: fw_9.191 "

}

[the_rock]

When you say deleted cluster from smart-1 web UI, not sure what exactly you mean by that? You canNOT delete any object from web UI, only smart dashboard or Guidbedit.

You can try below as far as API:

https://sc1.checkpoint.com/documents/latest/APIs/#cli/delete-simple-cluster~v1.9%20

Andy

[RamiShahar]

HI,

I mean by webUI = smart 1 portal (remove connection)

and then in the smart console failed to delete

The delete-simple-cluster API

Doesnt solve it for me..still an error

"

{

    "code": "generic_error",

    "message": "Runtime error: Could not commit JPA transaction; nested exception is javax.persistence.RollbackException: Transaction rolled back because transaction was set to RollbackOnly."

}

"

[the_rock]

Ok, I see what you mean, deleting from S1C portal, got it. Well, sadly, that wont do much, has to be done from actual smart console. Btw, you CAN get to guidbedit from S1C, I will send you screenshot later how, its super easy.

Andy

[RamiShahar]

yes just saw it also, still cant delete it from there also 

added pic's from db

[the_rock]

That 1st screenshot is what is preventing you, as it appears to suggest there is some sort of network associated with it. I cant say for sure what it could be unless I saw it for myself.

Andy

[RamiShahar]

Succeeds to delete the object!! Thx!

Now I have no idea why my API doesn't work

 I am using the management api login command

https://{{Smart1_server_name}}/web_api/login

After that I save the sid as the X-chkp-sid variable

Then I run the show asset \ show routes \ show interfaces to the GW and receive status : 500.

https://{{smart1_Servername}}/web_api/gaia-api/show-asset

With the body

{

                        "target" : "fw_name"

}

And this is the response.

{

    "code": "err_gaia_api_send_command_failed",

    "message": "Cannot send the command to the gateway: fw_name "

}

Other commands in the management API work fine (like show hosts etc...)-only the GAIA api through the management API not

I can see in the smart console that traffic on port 443\TCP is allow

I use read and write user permission

Any ideas?

[PhoneBoy]

https://{{smart1_Servername}}/web_api/gaia-api/show-asset is not a valid API endpoint.
To use the Gaia API, you authenticate to the gateway directly (not through your Smart-1).
See: https://sc1.checkpoint.com/documents/latest/GaiaAPIs/index.html#web/login~v1.7%20 

[RamiShahar]

Thx for the response

Isnt the smart 1 a management system like cma or smc and executes the same management api commands ?

I’m using the management API as the pic below.

https://sc1.checkpoint.com/documents/latest/APIs/?#web/gaia-api~v1.7%20

As far as for SMC or CMA this api from the management service to the GW is used to work.

Taking a look at this, it appears that it is supposed to support it no ?

API SMART 1 

Am I missing something ?

[PhoneBoy]

When you say Smart-1 Management system, what precise hardware are you referring to?
Or are you referring to Smart-1 Cloud?

I forgot you can chain commands through the management like this.
Is there a rule permitting HTTPS traffic between the management server and gateway on port 443?
Did you change the platform portal port to something other than port 443?

[RamiShahar]

 referring to Smart-1 Cloud

there is a rule permitting HTTPS traffic i even can see in the logs its accept the traffic to the gateway

didn't change the platform portal port from 443 tcp.

is there any specific log I can  view in the GW ?

[PhoneBoy]

Possible this isn't supported (or is broken with) Smart-1 Cloud.
Please open a TAC case on this issue: https://help.checkpoint.com.

[the_rock]

I dont know if its supported, but it does work. I had done it for customer before.

Andy

[RamiShahar]

Thx all for the reply. I will open a TAC

I also know it works as I used it 3 months ago 

[the_rock]

Keep us posted.

Andy

[Hugo_vd_Kooij]

I would start by getting the full detials fthrough the API of that object. See if anything stands out as having a wrong relation.

You may have to chnage that first and then delete the object.

[sakeleo213]

When you say deleted cluster from smart-1 web UI, not sure what exactly you mean by that? You canNOT delete any object from web UI, only smart dashboard or Guidbedit.

GTA 5 Apk OBB

[the_rock]

I already made that exact comment lol. He meant delete it from S1C portal, which is totally different than removing it from smart dashboard.

Andy