Fail on Smartview

[Bernardes]

Hello Mates! When I try to see something about smartview, I can't.

When I try to access https://management_IP/smartview  this redirects me to Gaia portal.

I have a applied evstop;evstart and cpstop;cpstart to try to recover, but it doesn't work.

Look how it shows me the licenses in smartconsole. I attached an image.

Any advice to recover the service?

[Chris_Atkinson]

Which JHF version is applied to the management out of interest?

[Bernardes]

Hello @Chris_Atkinson this appliance runs R81.10 HOTFIX_R81_10_JHF_COMP Take: 66

[the_rock]

Are you using custom port to log into web UI or is it just default 443?

[Bernardes]

Hello @the_rock to Gaia Web portal the default 443 port is used.

[the_rock]

Okay...any idea when this happened? Did it ever work?

[Amir_Senn]

This definitely looks like redirecting issue.

I would try to connect directly to MGMT server from the same subnet (take a laptop and connect it directly to switch) and look at the same page or trying to connect to webapp.

If this doesn't work, probably port issue. You can also try to connect to it using port 8443.

[the_rock]

But I think it would "folllow" the port, no? I recall when I had my mgmt on port 4434, smart view would point to https://172.16.10.203:4434/smartview and worked fine. The only reason I put it back to 443 was due to running mgmt_cli commands.

Andy

[Bernardes]

Hello @Amir_Senn .

The problem is actually that when I try to open a new tab in Logs and Monitor to view the reports, SmartView keeps loading and opens the Gaia portal login page within the SmartConsole as shown in the image below:

When I try to view the licenses via SmartConsole, this is how it appears:

This is strange, it shouldn't be like this.

[the_rock]

I remember customer has this issue once and we tried evstop/start , as well as cpstop/start, but to no avail, so once mgmt was rebooted, worked fine.

Did you try the reboot?

Andy

[Amir_Senn]

Yes this looks to be the same issue. That probably means you have a redirect on the path from SmartConsole host to the server.

I still suggest trying to connect and compare a host with SmartConsole from the same subnet. If this works you can work the way from there to the subnet you're using now.

[Bernardes]

Sorry, but I didn't quite understand what you meant. Are you saying that there is a redirection from the host where I have the SmartConsole installed? How is that possible if I access other managements and the problem doesn't occur?

[the_rock]

Can you send output of below, just to make sure (mgmt server, clish)

show web ssl-port

Andy

[Bernardes]

hello @the_rock bellow the output

[the_rock]

That looks right, so its default 443 port. I did not quite understand either what @Amir_Senn meant, maybe he can clarify. Btw, did this ever work properly? Maybe try install latest jumbo, does not hurt, since its management, so reboot is not really an issue.

Andy

[Bernardes]

sorry for the late answer. I tried to upgrade for the latest take (94), rebooting and the same occurs. This is very weird.

[Amir_Senn]

I meant that you can take a laptop, connect it directly to the server who is running as SmartEvent or to the switch it's connected to, try to reach the web SmartView app. If you succeed - it's redirecting by one of the GW.

[Bernardes]

I tried to reach smartview by browser, but it opens the Gaia Portal. It seems that smartview is not working properly, but I already tried to evstop;evstart, cpstop;cpstart, upgrade to the latest r81.10 take 94 and reboot. It doesn't work at all. The api status is running ok.

I'm thinking in get a migrate file and try to restore in another brand new VM to test.

[Bernardes · Accepted solution]

Dear Friends,

The problem has been resolved by following the solution in this post https://community.checkpoint.com/t5/Management/Smartview-stuck-as-loading-smartview-in-R80-20/td-p/3... As instructed in the post, I replaced the httpd2-smartview.conf file, then performed a cpstop;cpstart, and upon accessing the SmartConsole again, everything returned to normal.

For some reason, the httpd2-smartview.conf file was empty, likely due to some unauthorized modification. But now it is working normally.

Thank you for all your dedication!

[the_rock]

Thanks for letting us know! Good job.

[the_rock]

@Bernardes ...just curious, did you actually end up building brand new server and then copy that file over to one that had the issue?

Andy

[Bernardes]

@the_rock yes, I dit it.

[Salom_Idhogela]

Hi,

How did you replace the httpd2 file? You replaced it with what?

Regards,

Salom

[the_rock · Accepted solution]

I believe you replace it with clean file from working mgmt. Here is mine on R81.20

Andy

[Expert@cpazuremgmt:0]# find / -name httpd2-smartview.conf
/web/conf/extra/httpd2-smartview.conf
[Expert@cpazuremgmt:0]# more /web/conf/extra/httpd2-smartview.conf
LoadModule proxy_module modules/libmod_proxy.so
LoadModule proxy_http_module modules/libmod_proxy_http.so
LoadModule proxy_wstunnel_module modules/libmod_proxy_wstunnel.so

ProxyErrorOverride On

<Location /smartview/PUSH/>
ProxyPass ws://127.0.0.1:8082/smartview/PUSH/
ProxyPassReverse ws://127.0.0.1:8082/smartview/PUSH/
</Location>

<Location /smartview/embedded/PUSH/>
ProxyPass ws://127.0.0.1:8082/smartview/embedded/PUSH/
ProxyPassReverse ws://127.0.0.1:8082/smartview/embedded/PUSH/
</Location>

<Location /smartview/editor/PUSH/>
ProxyPass ws://127.0.0.1:8082/smartview/editor/PUSH/
ProxyPassReverse ws://127.0.0.1:8082/smartview/editor/PUSH/
</Location>

<Location /smartview/viewer/PUSH/>
ProxyPass ws://127.0.0.1:8082/smartview/viewer/PUSH/
ProxyPassReverse ws://127.0.0.1:8082/smartview/viewer/PUSH/
</Location>

<Location /smartview>
#START_ACCESS_LIST
Require all granted
#END_ACCESS_LIST

<LimitExcept HEAD POST GET>
Require all denied
</LimitExcept>

ProxyPass http://127.0.0.1:8082/smartview
ProxyPassReverse http://127.0.0.1:8082/smartview
</Location>

<Location /smartview/pdf/>
Require all denied
</Location>
[Expert@cpazuremgmt:0]#

[Salom_Idhogela]

I have managed to resolve the issue, I got the file from backups and copy it. I see the existing one did not have any content.

Thank you for the support.

Regards,

Salom

[the_rock]

Good job!

[Bernardes]

@Salom_Idhogela , @the_rock is right! I replaced it with a new file of an SMS working.