Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Anton_Kazantsev
Contributor

No items found in SmartConsole

Strange behavior on my r80.10 gateway. I logged in SmartConsole and saw this:

Has anyone encountered this situation ?

18 Replies
Dmitry_Krupnik
Employee
Employee

Hello Anton,

Tell me please, are you using the R80.10 GA or latest JHF has been installed?

Please, take a look this thread and comment from Eran, looks like related.

Regards,

Dmitry.

0 Kudos
Anton_Kazantsev
Contributor

Hello, thnx 4 reply. 

Its not a cosmetic issue, because I cant install policy. But I see the policy itself and can change and publish it. Also I see gateway in smartmonitor console

Some screens form Gaia and policy install UI

0 Kudos
Dmitry_Krupnik
Employee
Employee

Anton,

Let me check it internally.

Could you found the GW object in the Network Object list? If yes, please add the GW to "Standard" policy manually:

After it, create a new object (host, for example), perform publish and policy installation. 

Regards,

Dmitry.

0 Kudos
Anton_Kazantsev
Contributor

I added GW object, but policy install dont see it

 

0 Kudos
Dmitry_Krupnik
Employee
Employee

Anton,

The "fpfw-mobile" is GW, right? Could you also provide the same screen from MGMT WebUI.

Do I understand correctly, logout from SmartConsole and re-login doesn't help? 

Regards,

Dmitry.

0 Kudos
Anton_Kazantsev
Contributor

its a standalone, MGMT anf GW in one 

0 Kudos
Dmitry_Krupnik
Employee
Employee

Anton,

I see, thank you. I suggest to open the task in the TAC at the same time with my internal investigation. Please, send a number of this task to email, which you can find in the my profile.

 

Do I understand correctly, logout from SmartConsole and re-login doesn't help? 

Regards,

Dmitry.

0 Kudos
Anton_Kazantsev
Contributor

It doesn't

Relogin, discard changes, reboot, nothing help

I dont have support for this GW( 

Timothy_Hall
Champion
Champion

How many CPU cores and how much RAM is available on this standalone system?  Also the disk is not full right?  df -h to check.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

"Max Capture: Know Your Packets" Video Series
now available at http://www.maxpowerfirewalls.com
0 Kudos
Anton_Kazantsev
Contributor

Let's see

4 CPU cores with 4Gb RAM

And df output 

# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current
17G 9.6G 6.4G 61% /
/dev/sda1 289M 37M 237M 14% /boot
tmpfs 1.9G 4.0K 1.9G 1% /dev/shm
/dev/mapper/vg_splat-lv_log
39G 23G 14G 63% /var/log

seems good?

Timothy_Hall
Champion
Champion

No, minimum requirements for a standalone deployment under R80.10 is 2 cores and 6GB RAM.  Please see R80.10 release notes.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

"Max Capture: Know Your Packets" Video Series
now available at http://www.maxpowerfirewalls.com
0 Kudos
Anton_Kazantsev
Contributor

Ok, I increase RAM to 6Gb

# free
total used free shared buffers cached
Mem: 5966724 5344676 622048 0 69920 2393936
-/+ buffers/cache: 2880820 3085904
Swap: 3140696 0 3140696

nothing changed (

Maybe upgrade to 80.20 can help or reset sic 

0 Kudos
PhoneBoy
Admin
Admin

Actually it’s 8GB for a standalone (FW + MGMT) in R80.x, but I’d probably use 16GB.

0 Kudos
Anton_Kazantsev
Contributor

No matter, I changed to 8 

0 Kudos
Alessandro_Marr
Advisor

Did you check your smart  console version?

did you change any roles to  your user admin?

0 Kudos
Anton_Kazantsev
Contributor

SC version:

 

Rights:

0 Kudos
Anton_Kazantsev
Contributor

Found this 

[Executing:]# fw fetch cpwf-r77; fw stat

Fetching FW1 Security Policy From: cpwf-r77

Management rejected fetch for this module - sic name does not match.
Policy Fetch Failed

Maybe SIC.  I'll Check it out

0 Kudos
Anton_Kazantsev
Contributor

And found the way how to install policy from api

[Expert@cpwf-r77:0]# mgmt_cli install-policy policy-package "standard" access true threat-prevention false targets.1 "cpwf-r77" --format json
Username: admin
Password:


---------------------------------------------
Time: [21:36:41] 15/2/2019
---------------------------------------------
"Policy installation - Standard" in progress (0%)


---------------------------------------------
Time: [21:36:51] 15/2/2019
---------------------------------------------
"Policy installation - Standard" in progress (50%)


---------------------------------------------
Time: [21:37:01] 15/2/2019
---------------------------------------------
"Policy installation - Standard" succeeded (100%)
{
"tasks" : [ {
"uid" : "6f7e20cd-16f1-49aa-b13b-40701fbb898e",
"type" : "task",
"domain" : {
"uid" : "41e821a0-3720-11e3-aa6e-0800200c9fde",
"name" : "SMC User",
"domain-type" : "domain"
},
"task-id" : "82fdae92-a9f7-404a-a5c2-f75d5cb8a4a8",
"task-name" : "Policy installation - Standard",
"status" : "succeeded",
"progress-percentage" : 100,
"start-time" : {
"posix" : 1550248598869,
"iso-8601" : "2019-02-15T21:36+0500"
},
"last-update-time" : {
"posix" : 1550248614988,
"iso-8601" : "2019-02-15T21:36+0500"
},
"suppressed" : false,
"task-details" : [ {
"uid" : "ea5018dd-c31b-4f4d-8a78-5428b83fff8f",
"name" : null,
"domain" : {
"uid" : "41e821a0-3720-11e3-aa6e-0800200c9fde",
"name" : "SMC User",
"domain-type" : "domain"
},
"color" : "black",
"statusCode" : "succeeded with warnings",
"statusDescription" : "Succeeded with Warnings",
"taskNotification" : "6f7e20cd-16f1-49aa-b13b-40701fbb898e",
"gatewayId" : "4e95a5b1-01bb-204f-9142-c906642fe179",
"policyId" : "e095dc17-7496-4a8e-96b1-1687395b10b5",
"runningStages" : [ ],
"waitingStages" : [ ],
"stagesInfo" : [ {
"type" : "warn",
"stage" : "legacy policy load",
"messages" : [ {
"type" : "warn",
"message" : "Anti-Spoofing is not configured for some interfaces and gateways. This will allow address spoofing through these gateways.,,Anti-Spoofing should be configured on the following objects:,.Gateway: cpwf-r77, Interface: eth3,."
} ]
} ],
"cluster" : false,
"meta-info" : {
"validation-state" : "ok",
"last-modify-time" : {
"posix" : 1550248613863,
"iso-8601" : "2019-02-15T21:36+0500"
},
"last-modifier" : "System",
"creation-time" : {
"posix" : 1550248599106,
"iso-8601" : "2019-02-15T21:36+0500"
},
"creator" : "System"
},
"tags" : [ ],
"icon" : "General/globalsNa",
"comments" : "",
"display-name" : "",
"customFields" : null,
"gatewayName" : "cpwf-r77",
"revision" : "d621174f-f404-4ebb-82ea-910bac0d7dad"
} ],
"comments" : "Installation succeeded on cpwf-r77",
"color" : "black",
"icon" : "General/globalsNa",
"tags" : [ ],
"meta-info" : {
"lock" : "unlocked",
"validation-state" : "ok",
"last-modify-time" : {
"posix" : 1550248615005,
"iso-8601" : "2019-02-15T21:36+0500"
},
"last-modifier" : "System",
"creation-time" : {
"posix" : 1550248598871,
"iso-8601" : "2019-02-15T21:36+0500"
},
"creator" : "admin"
},
"read-only" : false
} ]
}