No access to MDS

[Matlu]

Hello,
There is a massive problem with all our users being able to connect to MDS through the SmartConsole.

In most of the attempts the message “The Operation Timed out” appears.

I login by SSH to MDS but the “api status” command does not show me any information.

Is it possible to correct this error?
Where can I see the root-cause of why this problem occurs with the MDS box? Is this error stored in a particular file?

What is the process related to the SmartConsole accesses?

Regards

[PhoneBoy]

SmartConsole talks to cpm and fwm.
Perhaps there is information in their respective .elg files?

[Matlu]

CPM and FWM, you should be able to see them in the command “cpwd_admin list”.

“API STATUS” is a command that should work in a MDS, or it only works in a simple SMS?

The .elg file you recommend me, exactly what is the path to get to this file, please?

Thank you.

[PhoneBoy]

api status is also relevant in MDS.
Various "elg" logs from various Check Point processes can be found in $FWDIR/log of the relevant domain (there's probably a global equivalent of this).

[the_rock]

What does api status show?

Also, what is output of cpwd_admin list and $FWDIR/scripts./cpm_status.sh?

For api issue, you can also try api stop; api start

Andy

[emmap]

Start with 'mdsstat' to check that all the DMS processes are running. If they are not, try restarting the server.

[Tal_Paz-Fridman]

If connection from SmartConsole fails with “The Operation Timed out” and api status does not show any information it might mean that relevant processed are not running properly or that the machine is under high load.

How much many CPUs/Cores and RAM does the machine have?

Can you also check the CPU and RAM usage when this happens?

[the_rock]

All good points Tal...I actually have case with TAC currently for a customer with regular mgmt server, and everything shows stopped from api status, except apache. I have no clue in the world how this happened, but they told me it occured after rebooting the machine, which is very odd, as people reboot mgmt server often.

Andy