Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Anton_Kazantsev
Contributor

No items found in SmartConsole

Strange behavior on my r80.10 gateway. I logged in SmartConsole and saw this:

Has anyone encountered this situation ?

25 Replies
Dmitry_Krupnik
Employee Alumnus
Employee Alumnus

Hello Anton,

Tell me please, are you using the R80.10 GA or latest JHF has been installed?

Please, take a look this thread and comment from Eran, looks like related.

Regards,

Dmitry.

Anton_Kazantsev
Contributor

Hello, thnx 4 reply. 

Its not a cosmetic issue, because I cant install policy. But I see the policy itself and can change and publish it. Also I see gateway in smartmonitor console

Some screens form Gaia and policy install UI

Dmitry_Krupnik
Employee Alumnus
Employee Alumnus

Anton,

Let me check it internally.

Could you found the GW object in the Network Object list? If yes, please add the GW to "Standard" policy manually:

After it, create a new object (host, for example), perform publish and policy installation. 

Regards,

Dmitry.

Anton_Kazantsev
Contributor

I added GW object, but policy install dont see it

 

Dmitry_Krupnik
Employee Alumnus
Employee Alumnus

Anton,

The "fpfw-mobile" is GW, right? Could you also provide the same screen from MGMT WebUI.

Do I understand correctly, logout from SmartConsole and re-login doesn't help? 

Regards,

Dmitry.

Anton_Kazantsev
Contributor

its a standalone, MGMT anf GW in one 

Dmitry_Krupnik
Employee Alumnus
Employee Alumnus

Anton,

I see, thank you. I suggest to open the task in the TAC at the same time with my internal investigation. Please, send a number of this task to email, which you can find in the my profile.

 

Do I understand correctly, logout from SmartConsole and re-login doesn't help? 

Regards,

Dmitry.

Anton_Kazantsev
Contributor

It doesn't

Relogin, discard changes, reboot, nothing help

I dont have support for this GW( 

Timothy_Hall
Legend Legend
Legend

How many CPU cores and how much RAM is available on this standalone system?  Also the disk is not full right?  df -h to check.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

Attend my 60-minute "Be your Own TAC: Part Deux" Presentation
Exclusively at CPX 2025 Las Vegas Tuesday Feb 25th @ 1:00pm
Anton_Kazantsev
Contributor

Let's see

4 CPU cores with 4Gb RAM

And df output 

# df -hFilesystem            Size  Used Avail Use% Mounted on/dev/mapper/vg_splat-lv_current                       17G  9.6G  6.4G  61% //dev/sda1             289M   37M  237M  14% /boottmpfs                 1.9G  4.0K  1.9G   1% /dev/shm/dev/mapper/vg_splat-lv_log                       39G   23G   14G  63% /var/log‍‍‍‍‍‍‍‍

seems good?

Timothy_Hall
Legend Legend
Legend

No, minimum requirements for a standalone deployment under R80.10 is 2 cores and 6GB RAM.  Please see R80.10 release notes.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

Attend my 60-minute "Be your Own TAC: Part Deux" Presentation
Exclusively at CPX 2025 Las Vegas Tuesday Feb 25th @ 1:00pm
Anton_Kazantsev
Contributor

Ok, I increase RAM to 6Gb

# free             total       used       free     shared    buffers     cachedMem:       5966724    5344676     622048          0      69920    2393936-/+ buffers/cache:    2880820    3085904Swap:      3140696          0    3140696‍‍‍‍‍

nothing changed (

Maybe upgrade to 80.20 can help or reset sic 

PhoneBoy
Admin
Admin

Actually it’s 8GB for a standalone (FW + MGMT) in R80.x, but I’d probably use 16GB.

Anton_Kazantsev
Contributor

No matter, I changed to 8 

Alessandro_Marr
Advisor

Did you check your smart  console version?

did you change any roles to  your user admin?

Anton_Kazantsev
Contributor

SC version:

 

Rights:

Anton_Kazantsev
Contributor

Found this 

[Executing:]# fw fetch cpwf-r77; fw statFetching FW1 Security Policy From: cpwf-r77 Management rejected fetch for this module - sic name does not match. Policy Fetch Failed‍‍‍‍‍‍

Maybe SIC.  I'll Check it out

Anton_Kazantsev
Contributor

And found the way how to install policy from api

[Expert@cpwf-r77:0]# mgmt_cli install-policy policy-package "standard" access true threat-prevention false targets.1 "cpwf-r77" --format jsonUsername: adminPassword:---------------------------------------------Time: [21:36:41] 15/2/2019---------------------------------------------"Policy installation - Standard"  in progress  (0%)---------------------------------------------Time: [21:36:51] 15/2/2019---------------------------------------------"Policy installation - Standard"  in progress  (50%)---------------------------------------------Time: [21:37:01] 15/2/2019---------------------------------------------"Policy installation - Standard"  succeeded  (100%){  "tasks" : [ {    "uid" : "6f7e20cd-16f1-49aa-b13b-40701fbb898e",    "type" : "task",    "domain" : {      "uid" : "41e821a0-3720-11e3-aa6e-0800200c9fde",      "name" : "SMC User",      "domain-type" : "domain"    },    "task-id" : "82fdae92-a9f7-404a-a5c2-f75d5cb8a4a8",    "task-name" : "Policy installation - Standard",    "status" : "succeeded",    "progress-percentage" : 100,    "start-time" : {      "posix" : 1550248598869,      "iso-8601" : "2019-02-15T21:36+0500"    },    "last-update-time" : {      "posix" : 1550248614988,      "iso-8601" : "2019-02-15T21:36+0500"    },    "suppressed" : false,    "task-details" : [ {      "uid" : "ea5018dd-c31b-4f4d-8a78-5428b83fff8f",      "name" : null,      "domain" : {        "uid" : "41e821a0-3720-11e3-aa6e-0800200c9fde",        "name" : "SMC User",        "domain-type" : "domain"      },      "color" : "black",      "statusCode" : "succeeded with warnings",      "statusDescription" : "Succeeded with Warnings",      "taskNotification" : "6f7e20cd-16f1-49aa-b13b-40701fbb898e",      "gatewayId" : "4e95a5b1-01bb-204f-9142-c906642fe179",      "policyId" : "e095dc17-7496-4a8e-96b1-1687395b10b5",      "runningStages" : [ ],      "waitingStages" : [ ],      "stagesInfo" : [ {        "type" : "warn",        "stage" : "legacy policy load",        "messages" : [ {          "type" : "warn",          "message" : "Anti-Spoofing is not configured for some interfaces and gateways. This will allow address spoofing through these gateways.,,Anti-Spoofing should be configured on the following objects:,.Gateway: cpwf-r77, Interface: eth3,."        } ]      } ],      "cluster" : false,      "meta-info" : {        "validation-state" : "ok",        "last-modify-time" : {          "posix" : 1550248613863,          "iso-8601" : "2019-02-15T21:36+0500"        },        "last-modifier" : "System",        "creation-time" : {          "posix" : 1550248599106,          "iso-8601" : "2019-02-15T21:36+0500"        },        "creator" : "System"      },      "tags" : [ ],      "icon" : "General/globalsNa",      "comments" : "",      "display-name" : "",      "customFields" : null,      "gatewayName" : "cpwf-r77",      "revision" : "d621174f-f404-4ebb-82ea-910bac0d7dad"    } ],    "comments" : "Installation succeeded on cpwf-r77",    "color" : "black",    "icon" : "General/globalsNa",    "tags" : [ ],    "meta-info" : {      "lock" : "unlocked",      "validation-state" : "ok",      "last-modify-time" : {        "posix" : 1550248615005,        "iso-8601" : "2019-02-15T21:36+0500"      },      "last-modifier" : "System",      "creation-time" : {        "posix" : 1550248598871,        "iso-8601" : "2019-02-15T21:36+0500"      },      "creator" : "admin"    },    "read-only" : false  } ]}‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍
RAlves
Explorer

Hi

I have the same problem in R80.40 take 211. Is there any solution?

Thanks

the_rock
Legend
Legend

Some questions:

-does it happen on every PC you try when logged into smart console?

-did you update smart console to latest one?

-if there is more than 1 admin, do they get same result?

-have you tried cprestart or reboot of the mgmt server?

Andy

RAlves
Explorer

Yes, i've tried on 2 different pc's with the latest smartconsole. I didi several restarts with no avail. I've only have 1 admin account. i can try to create another one and try

G_W_Albrecht
Legend Legend
Legend

R80.40 is out of any support since April 2024 !

 

CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
RAlves
Explorer

The problem started because of a failed upgrad to R81.20 and i had to restore to the latest snapshot

the_rock
Legend
Legend

See, thats tricky part, because in order to get TAC help, you would need to be on supported version.

Andy

RAlves
Explorer

With another admin the same behavior

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events