- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
10 December @ 5pm CET / 11am ET
Announcing Quantum R82.10!
Learn MoreOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hello, Mates
Is it possible to remove a particular CMA from my MLM?
I have MLM redundancy, but there is a problem with a particular CMA, and we need to delete it and recreate it.
Is this possible? Either by the SmartConsole itself or by the MLM CLI.
Does deleting a CMA impact the main box at all? Is there any special consideration to take into account?
Thanks for your comments.
A CMA contains all data for a specific domain (objects, rules, SIC for all managed objects, etc).
Deleting it is a rather destructive action.
Also, you don't delete it from the MLM, you delete it from the MDS side.
When you create the new CMA, you can associate it to the MLM.
Hello
In my case, it is not a CMA that is “managing” GW or Cluster.
It is a CMA but it is inside a MLM box ...
The CMA is intended only as a “Virtual Log Server”, to collect the logs of several VS's.
We are having problems with a single CMA of our MLM, so, would it be possible to delete it, and recreate it?
Or would this still cause service interruption in some way?
Thanks.
In terms of gateway traffic, there should be no impact.
If a gateway can't reach its log server, it will either log to a different server (if configured) or store logs locally until the log server is available.
It will likely require a policy install for logging to flow to the MLM again.
For MLM we're using a different term not to confuse.
Yes, you can remove it and create a fresh one instead. I would move the logs if existing first to the other log server you have on the domain.
You can stop/start just a specific server in the CLI using "mdsstop_customer <IP/name>"
Hello,
We have already run the command repeatedly, we have also restarted the MLM box, and the problem continues.
The TAC does not find the root-cause of the problem.
The MLM has several CMA and the problem is only with 1, that is not receiving logs from the VSX Cluster that corresponds to it, and that is causing that one of the members of the VSX CLUSTER is filling daily its var/log path because it is storing locally.
It is a very strange case.
Very odd...maybe have them escalate the case?
Andy
There are the steps I noted down while ago when I had to do this with someone.
mdsstop_customer <CMA_Name>
mdsenv <CMA_Name>
fwm sic_reset
fwm unloadlocal
mdsenv
mdsstop
mds_cma_delete <CMA_Name>
mdsstart
Andy
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 22 | |
| 15 | |
| 7 | |
| 6 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 |
Fri 12 Dec 2025 @ 10:00 AM (CET)
Check Mates Live Netherlands: #41 AI & Multi Context ProtocolTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Fri 12 Dec 2025 @ 10:00 AM (CET)
Check Mates Live Netherlands: #41 AI & Multi Context ProtocolTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY