- CheckMates
- :
- Products
- :
- Infinity Global Services
- :
- Infinity Portal
- :
- Re: Smart 1-delete cluster
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Smart 1-delete cluster
Hi all,
I have 2 questions regarding Smart 1
1 ) Cluster object-I removed the GW's from the smart 1 webUI but when trying to delete the cluster from the smart console i get this error "failed to delete the object-Unknown error"
Since I don't have a GUI DB edit, is there a way to overcome the error and delete this cluster object?
2) when trying to send api from smart 1 management to the gw (through GAIA api) I get this error on the gw.
I use read and write mode.
Management sends traffic to the GW.
Is there another GW configuration to check?
Login and other API work fine
API :
//https://{{smart1-server}}/web_api/v1.7/gaia-api/show-routes
Body :
{
"target" : "fw_9.191"
}
Response :
{
"code": "err_gaia_api_send_command_failed",
"message": "Cannot send the command to the gateway: fw_9.191 "
}
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
When you say deleted cluster from smart-1 web UI, not sure what exactly you mean by that? You canNOT delete any object from web UI, only smart dashboard or Guidbedit.
You can try below as far as API:
https://sc1.checkpoint.com/documents/latest/APIs/#cli/delete-simple-cluster~v1.9%20
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
HI,
I mean by webUI = smart 1 portal (remove connection)
and then in the smart console failed to delete
The delete-simple-cluster API
Doesnt solve it for me..still an error
"
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ok, I see what you mean, deleting from S1C portal, got it. Well, sadly, that wont do much, has to be done from actual smart console. Btw, you CAN get to guidbedit from S1C, I will send you screenshot later how, its super easy.
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yes just saw it also, still cant delete it from there also
added pic's from db
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
That 1st screenshot is what is preventing you, as it appears to suggest there is some sort of network associated with it. I cant say for sure what it could be unless I saw it for myself.
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Succeeds to delete the object!! Thx!
Now I have no idea why my API doesn't work
I am using the management api login command
https://{{Smart1_server_name}}/web_api/login
After that I save the sid as the X-chkp-sid variable
Then I run the show asset \ show routes \ show interfaces to the GW and receive status : 500.
https://{{smart1_Servername}}/web_api/gaia-api/show-asset
With the body
{
"target" : "fw_name"
}
And this is the response.
{
"code": "err_gaia_api_send_command_failed",
"message": "Cannot send the command to the gateway: fw_name "
}
Other commands in the management API work fine (like show hosts etc...)-only the GAIA api through the management API not
I can see in the smart console that traffic on port 443\TCP is allow
I use read and write user permission
Any ideas?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
https://{{smart1_Servername}}/web_api/gaia-api/show-asset is not a valid API endpoint.
To use the Gaia API, you authenticate to the gateway directly (not through your Smart-1).
See: https://sc1.checkpoint.com/documents/latest/GaiaAPIs/index.html#web/login~v1.7%20
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thx for the response
Isnt the smart 1 a management system like cma or smc and executes the same management api commands ?
I’m using the management API as the pic below.
https://sc1.checkpoint.com/documents/latest/APIs/?#web/gaia-api~v1.7%20
As far as for SMC or CMA this api from the management service to the GW is used to work.
Taking a look at this, it appears that it is supposed to support it no ?
Am I missing something ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
When you say Smart-1 Management system, what precise hardware are you referring to?
Or are you referring to Smart-1 Cloud?
I forgot you can chain commands through the management like this.
Is there a rule permitting HTTPS traffic between the management server and gateway on port 443?
Did you change the platform portal port to something other than port 443?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
referring to Smart-1 Cloud
there is a rule permitting HTTPS traffic i even can see in the logs its accept the traffic to the gateway
didn't change the platform portal port from 443 tcp.
is there any specific log I can view in the GW ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Possible this isn't supported (or is broken with) Smart-1 Cloud.
Please open a TAC case on this issue: https://help.checkpoint.com.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I dont know if its supported, but it does work. I had done it for customer before.
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thx all for the reply. I will open a TAC
I also know it works as I used it 3 months ago
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Keep us posted.
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I would start by getting the full detials fthrough the API of that object. See if anything stands out as having a wrong relation.
You may have to chnage that first and then delete the object.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
When you say deleted cluster from smart-1 web UI, not sure what exactly you mean by that? You canNOT delete any object from web UI, only smart dashboard or Guidbedit.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I already made that exact comment lol. He meant delete it from S1C portal, which is totally different than removing it from smart dashboard.
Andy
