- Products
- Learn
- Local User Groups
- Partners
- More
Quantum Spark Management Unleashed!
Introducing Check Point Quantum Spark 2500:
Smarter Security, Faster Connectivity, and Simpler MSP Management!
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
SharePoint CVEs and More!
Hello,
I have this error when starting smartview,
check sk133075, but I have not found any network blocking affecting.
I also checked the api status and it returned the following:
[Expert@isis:0]# fw ver
This is Check Point's software version R82 - Build 004
[Expert@isis:0]# free -ht
total used free shared buff/cache available
Mem: 31G 9.0G 4.5G 1.2G 17G 20G
Swap: 31G 0B 31G
Total: 62G 9.0G 35G
[Expert@isis:0]# df -hT
Filesystem Type Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current xfs 50G 37G 14G 73% /
/dev/sda1 ext3 282M 63M 204M 24% /boot
tmpfs tmpfs 16G 21M 16G 1% /dev/shm
/dev/mapper/vg_splat-lv_log xfs 750G 627G 124G 84% /var/log
cgroup tmpfs 16G 4.0K 16G 1% /sys/fs/cgroup
more info:
[Expert@isis:0]# cat /web/conf/extra/httpd2-smartview.conf
LoadModule proxy_module modules/libmod_proxy.so
LoadModule proxy_http_module modules/libmod_proxy_http.so
LoadModule proxy_wstunnel_module modules/libmod_proxy_wstunnel.so
ProxyErrorOverride On
<Location /smartview/PUSH/>
ProxyPass ws://127.0.0.1:8082/smartview/PUSH/
ProxyPassReverse ws://127.0.0.1:8082/smartview/PUSH/
</Location>
<Location /smartview/embedded/PUSH/>
ProxyPass ws://127.0.0.1:8082/smartview/embedded/PUSH/
ProxyPassReverse ws://127.0.0.1:8082/smartview/embedded/PUSH/
</Location>
<Location /smartview/editor/PUSH/>
ProxyPass ws://127.0.0.1:8082/smartview/editor/PUSH/
ProxyPassReverse ws://127.0.0.1:8082/smartview/editor/PUSH/
</Location>
<Location /smartview/viewer/PUSH/>
ProxyPass ws://127.0.0.1:8082/smartview/viewer/PUSH/
ProxyPassReverse ws://127.0.0.1:8082/smartview/viewer/PUSH/
</Location>
<Location /smartview/Proxy/PUSH/>
ProxyPass ws://127.0.0.1:8082/smartview/Proxy/PUSH/
ProxyPassReverse ws://127.0.0.1:8082/smartview/Proxy/PUSH/
</Location>
<Location /smartview>
#START_ACCESS_LIST
Require all granted
#END_ACCESS_LIST
<LimitExcept HEAD POST GET>
Require all denied
</LimitExcept>
ProxyPass http://127.0.0.1:8082/smartview
ProxyPassReverse http://127.0.0.1:8082/smartview
</Location>
<Location /smartview/pdf/>
Require all denied
</Location>
[Expert@isis:0]# manage_clients -print
Any
[Expert@isis:0]# tail -f /usr/local/apache2/logs/error_log
[Wed Jun 18 17:46:33.970207 2025] [proxy_http:error] [pid 2000:tid 2000] (70007)The timeout specified has expired: [client 127.0.0.1:35458] AH01102: error reading status line from remote server 127.0.0.1:4434
[Wed Jun 18 17:46:33.970234 2025] [proxy:error] [pid 2000:tid 2000] [client 127.0.0.1:35458] AH00898: Error reading from remote server returned by /smartview/embedded/
Can you guide me on what I should check to solve this problem?
Hi Andy, yes, I tried cpstop;cpstart, but it didn't work. Apparently the uepm_gaia_ssl.conf file has been corrupted, so by following sk182093 I was able to fix it.
https://support.checkpoint.com/results/sk/sk182093
Thank you very much for your help!
[Expert@isis:0]# tail -f /var/log/httpd2_error_log
[Wed Jun 18 17:41:34.197224 2025] [proxy_http:error] [pid 2002:tid 2002] (70007)The timeout specified has expired: [client 127.0.0.1:48500] AH01102: error reading status line from remote server 127.0.0.1:4434
[Wed Jun 18 17:41:34.197257 2025] [proxy:error] [pid 2002:tid 2002] [client 127.0.0.1:48500] AH00898: Error reading from remote server returned by /smartview/embedded/
[Wed Jun 18 17:41:34.630543 2025] [proxy_http:error] [pid 2005:tid 2005] (70007)The timeout specified has expired: [client 127.0.0.1:48506] AH01102: error reading status line from remote server 127.0.0.1:4434
[Wed Jun 18 17:41:34.630583 2025] [proxy:error] [pid 2005:tid 2005] [client 127.0.0.1:48506] AH00898: Error reading from remote server returned by /smartview/embedded/
[Wed Jun 18 17:41:37.010992 2025] [proxy_http:error] [pid 1999:tid 1999] (70007)The timeout specified has expired: [client 127.0.0.1:47320] AH01102: error reading status line from remote server 127.0.0.1:4434
[Wed Jun 18 17:41:37.011047 2025] [proxy:error] [pid 1999:tid 1999] [client 127.0.0.1:47320] AH00898: Error reading from remote server returned by /smartview/embedded/
[Wed Jun 18 17:41:37.026472 2025] [proxy_http:error] [pid 2014:tid 2014] (70007)The timeout specified has expired: [client 127.0.0.1:47326] AH01102: error reading status line from remote server 127.0.0.1:4434
[Wed Jun 18 17:41:37.026510 2025] [proxy:error] [pid 2014:tid 2014] [client 127.0.0.1:47326] AH00898: Error reading from remote server returned by /smartview/embedded/
[Wed Jun 18 17:41:37.037033 2025] [proxy_http:error] [pid 2007:tid 2007] (70007)The timeout specified has expired: [client 127.0.0.1:47332] AH01102: error reading status line from remote server 127.0.0.1:4434
What version is this? If its R81.20 or R82 mgmt, I am happy to send you working httpd2.conf file and you can try.
Andy
I see its R82, never mind. Give me few mins, will attach it...but PLEASE PLEASE...MAKE SURE you back up existing file before replacing with one I will attach (if you want to try).
Andy
Let me know if the file works Diego.
Andy
Unfortunately it didn't work for me, I will try to install the latest jhf to see if anything changes.
Did you try cprestart or reboot after file replacement? What does api status show now?
Andy
Hi Andy, yes, I tried cpstop;cpstart, but it didn't work. Apparently the uepm_gaia_ssl.conf file has been corrupted, so by following sk182093 I was able to fix it.
https://support.checkpoint.com/results/sk/sk182093
Thank you very much for your help!
Glad that worked. Still a bit odd, cause I checked my R82 lab mgmt and file is in totally different dir.
Andy
[Expert@CP-MANAGEMENT:0]# find / -name uepm_gaia_ssl.conf
find: /proc/26500: No such file or directory
/opt/CPuepm-R82/system/templates/uepm_gaia_ssl.conf
[Expert@CP-MANAGEMENT:0]#
Try changing the web port back to 443 and see if the problem persists.
Either way, TAC probably needs to be consulted.
I agree with Phoneboy. On top of that, I would also say, if this is a VM< try changing NIC type, as that was the problem in my lab recently on R82 when smartview was not working.
Andy
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
17 | |
6 | |
4 | |
4 | |
4 | |
4 | |
2 | |
2 | |
2 | |
2 |
Wed 03 Sep 2025 @ 11:00 AM (SGT)
Deep Dive APAC: Troubleshooting 101 for Quantum Security GatewaysThu 04 Sep 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: External Risk Management for DummiesWed 10 Sep 2025 @ 11:00 AM (CEST)
Effortless Web Application & API Security with AI-Powered WAF, an intro to CloudGuard WAFWed 10 Sep 2025 @ 11:00 AM (EDT)
Quantum Spark Management Unleashed: Hands-On TechTalk for MSPs Managing SMB NetworksWed 03 Sep 2025 @ 11:00 AM (SGT)
Deep Dive APAC: Troubleshooting 101 for Quantum Security GatewaysThu 04 Sep 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: External Risk Management for DummiesWed 10 Sep 2025 @ 11:00 AM (EDT)
Quantum Spark Management Unleashed: Hands-On TechTalk for MSPs Managing SMB NetworksAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY