How to find SMS IP address on gateway

[Lukasz_Godlewsk]

Hi all,

I got Cloudguard vm which is not connected to SMS. 

Is there a way to find an IP address of SMS server on a gateway from which policy was fetched?

Tried to look for that in:

- $CPDIR/log/cpd.elg

- $FWDIR/log/fwd.elg

but without a luck.

Any advice appreciated.

[CheckPointerXL · Accepted solution]

grep ICAip $CPDIR/registry/HKLM_registry.data

[the_rock · Accepted solution]

Thats it, what @CheckPointerXL sent. Here is example in my Azure lab.

Andy

[Expert@cpazurecluster1:0]# grep ICAip $CPDIR/registry/HKLM_registry.data
:ICAip (20.220.86.199)
[Expert@cpazurecluster1:0]#

[lgodlewski]

Hi the_rock,
could that be version depended?

on R80_40 I am not getting any information:

[Expert]# grep ICAip $CPDIR/registry/HKLM_registry.data
[Expert]#

However I see that policy was installed few days ago.
[Expert]# fw stat
HOST POLICY DATE
localhost Standard 6Mar2024 9:00:26 : [>eth0] [<eth0]

[the_rock]

It should work even in R80.40, make sure you run that command on the fw, NOT management server

Example from my cluster lab.

Andy

[Expert@CP-FW-02:0]# grep ICAip $CPDIR/registry/HKLM_registry.data
:ICAip (172.16.10.252)
[Expert@CP-FW-02:0]#

[lgodlewski]

You are right it is management server.  
[Expert@]# cpprod_util FwIsStandAlone
1

Thanks for help

[the_rock]

Keep in mind, that command will ALWAYS show 0 if device is configured either as mgmt server OR the firewall only. It shows 1 when its standalone (fw + mgmt in one)

Best,

Andy