No items found in SmartConsole

[Anton_Kazantsev]

Strange behavior on my r80.10 gateway. I logged in SmartConsole and saw this:

Has anyone encountered this situation ?

[Dmitry_Krupnik]

Hello Anton,

Tell me please, are you using the R80.10 GA or latest JHF has been installed?

Please, take a look this thread and comment from Eran, looks like related.

Regards,

Dmitry.

[Anton_Kazantsev]

Hello, thnx 4 reply. 

Its not a cosmetic issue, because I cant install policy. But I see the policy itself and can change and publish it. Also I see gateway in smartmonitor console

Some screens form Gaia and policy install UI

[Dmitry_Krupnik]

Anton,

Let me check it internally.

Could you found the GW object in the Network Object list? If yes, please add the GW to "Standard" policy manually:

After it, create a new object (host, for example), perform publish and policy installation. 

Regards,

Dmitry.

[Anton_Kazantsev]

I added GW object, but policy install dont see it

 

[Dmitry_Krupnik]

Anton,

The "fpfw-mobile" is GW, right? Could you also provide the same screen from MGMT WebUI.

Do I understand correctly, logout from SmartConsole and re-login doesn't help? 

Regards,

Dmitry.

[Anton_Kazantsev]

its a standalone, MGMT anf GW in one 

[Dmitry_Krupnik]

Anton,

I see, thank you. I suggest to open the task in the TAC at the same time with my internal investigation. Please, send a number of this task to email, which you can find in the my profile.

Do I understand correctly, logout from SmartConsole and re-login doesn't help? 

Regards,

Dmitry.

[Anton_Kazantsev]

It doesn't

Relogin, discard changes, reboot, nothing help

I dont have support for this GW( 

[Timothy_Hall]

How many CPU cores and how much RAM is available on this standalone system?  Also the disk is not full right?  df -h to check.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

[Anton_Kazantsev]

Let's see

4 CPU cores with 4Gb RAM

And df output 

# df -hFilesystem            Size  Used Avail Use% Mounted on/dev/mapper/vg_splat-lv_current                       17G  9.6G  6.4G  61% //dev/sda1             289M   37M  237M  14% /boottmpfs                 1.9G  4.0K  1.9G   1% /dev/shm/dev/mapper/vg_splat-lv_log                       39G   23G   14G  63% /var/log‍‍‍‍‍‍‍‍

seems good?

[Timothy_Hall]

No, minimum requirements for a standalone deployment under R80.10 is 2 cores and 6GB RAM.  Please see R80.10 release notes.

--
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

[Anton_Kazantsev]

Ok, I increase RAM to 6Gb

# free             total       used       free     shared    buffers     cachedMem:       5966724    5344676     622048          0      69920    2393936-/+ buffers/cache:    2880820    3085904Swap:      3140696          0    3140696‍‍‍‍‍

nothing changed (

Maybe upgrade to 80.20 can help or reset sic 

[PhoneBoy]

Actually it’s 8GB for a standalone (FW + MGMT) in R80.x, but I’d probably use 16GB.

[Anton_Kazantsev]

No matter, I changed to 8 

[Alessandro_Marr]

Did you check your smart  console version?

did you change any roles to  your user admin?

[Anton_Kazantsev]

SC version:

 

Rights:

[Anton_Kazantsev]

Found this 

[Executing:]# fw fetch cpwf-r77; fw statFetching FW1 Security Policy From: cpwf-r77 Management rejected fetch for this module - sic name does not match. Policy Fetch Failed‍‍‍‍‍‍

Maybe SIC.  I'll Check it out

[Anton_Kazantsev]

And found the way how to install policy from api

[Expert@cpwf-r77:0]# mgmt_cli install-policy policy-package "standard" access true threat-prevention false targets.1 "cpwf-r77" --format jsonUsername: adminPassword:---------------------------------------------Time: [21:36:41] 15/2/2019---------------------------------------------"Policy installation - Standard"  in progress  (0%)---------------------------------------------Time: [21:36:51] 15/2/2019---------------------------------------------"Policy installation - Standard"  in progress  (50%)---------------------------------------------Time: [21:37:01] 15/2/2019---------------------------------------------"Policy installation - Standard"  succeeded  (100%){  "tasks" : [ {    "uid" : "6f7e20cd-16f1-49aa-b13b-40701fbb898e",    "type" : "task",    "domain" : {      "uid" : "41e821a0-3720-11e3-aa6e-0800200c9fde",      "name" : "SMC User",      "domain-type" : "domain"    },    "task-id" : "82fdae92-a9f7-404a-a5c2-f75d5cb8a4a8",    "task-name" : "Policy installation - Standard",    "status" : "succeeded",    "progress-percentage" : 100,    "start-time" : {      "posix" : 1550248598869,      "iso-8601" : "2019-02-15T21:36+0500"    },    "last-update-time" : {      "posix" : 1550248614988,      "iso-8601" : "2019-02-15T21:36+0500"    },    "suppressed" : false,    "task-details" : [ {      "uid" : "ea5018dd-c31b-4f4d-8a78-5428b83fff8f",      "name" : null,      "domain" : {        "uid" : "41e821a0-3720-11e3-aa6e-0800200c9fde",        "name" : "SMC User",        "domain-type" : "domain"      },      "color" : "black",      "statusCode" : "succeeded with warnings",      "statusDescription" : "Succeeded with Warnings",      "taskNotification" : "6f7e20cd-16f1-49aa-b13b-40701fbb898e",      "gatewayId" : "4e95a5b1-01bb-204f-9142-c906642fe179",      "policyId" : "e095dc17-7496-4a8e-96b1-1687395b10b5",      "runningStages" : [ ],      "waitingStages" : [ ],      "stagesInfo" : [ {        "type" : "warn",        "stage" : "legacy policy load",        "messages" : [ {          "type" : "warn",          "message" : "Anti-Spoofing is not configured for some interfaces and gateways. This will allow address spoofing through these gateways.,,Anti-Spoofing should be configured on the following objects:,.Gateway: cpwf-r77, Interface: eth3,."        } ]      } ],      "cluster" : false,      "meta-info" : {        "validation-state" : "ok",        "last-modify-time" : {          "posix" : 1550248613863,          "iso-8601" : "2019-02-15T21:36+0500"        },        "last-modifier" : "System",        "creation-time" : {          "posix" : 1550248599106,          "iso-8601" : "2019-02-15T21:36+0500"        },        "creator" : "System"      },      "tags" : [ ],      "icon" : "General/globalsNa",      "comments" : "",      "display-name" : "",      "customFields" : null,      "gatewayName" : "cpwf-r77",      "revision" : "d621174f-f404-4ebb-82ea-910bac0d7dad"    } ],    "comments" : "Installation succeeded on cpwf-r77",    "color" : "black",    "icon" : "General/globalsNa",    "tags" : [ ],    "meta-info" : {      "lock" : "unlocked",      "validation-state" : "ok",      "last-modify-time" : {        "posix" : 1550248615005,        "iso-8601" : "2019-02-15T21:36+0500"      },      "last-modifier" : "System",      "creation-time" : {        "posix" : 1550248598871,        "iso-8601" : "2019-02-15T21:36+0500"      },      "creator" : "admin"    },    "read-only" : false  } ]}‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

[RAlves]

Hi

I have the same problem in R80.40 take 211. Is there any solution?

Thanks

[the_rock]

Some questions:

-does it happen on every PC you try when logged into smart console?

-did you update smart console to latest one?

-if there is more than 1 admin, do they get same result?

-have you tried cprestart or reboot of the mgmt server?

Andy

[RAlves]

Yes, i've tried on 2 different pc's with the latest smartconsole. I didi several restarts with no avail. I've only have 1 admin account. i can try to create another one and try

[G_W_Albrecht]

R80.40 is out of any support since April 2024 !

[RAlves]

The problem started because of a failed upgrad to R81.20 and i had to restore to the latest snapshot

[the_rock]

See, thats tricky part, because in order to get TAC help, you would need to be on supported version.

Andy

[RAlves]

With another admin the same behavior