This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Create a Post
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Nuggeteer
Contributor
‎2024-10-23 01:26 PM

Unable to make changes to gateway

This is a lab environment. Within the SmartConsole I'm having problems with a gateway. I'm not able to disable blades and I believe there's some sort of corruption going on. I even tried deleting the gateway entirely so I could just deploy a new one for testing but I'm not able to delete the gateway from the console and I've verified it's not associated with any policies or objects. I get this error when I turn on debugging for the EclipseExceptionHandler. Here I was trying to delete the gateway from the console:

3.png

 I've been fighting with this gateway since enabling autonomous threat prevention (again this is a lab). I've had to reset SIC, fight with locked sessions, etc. Honestly, it's been a pretty bad experience and I'm not sure what's going on with it. Any feedback would be appreciated.

Labels
0 Kudos
9 Replies
Lesley
MVP Gold
MVP Gold
‎2024-10-23 01:42 PM

Everything up to date or atleast recent jumbo version?

SmartConsole also up to date? 

Most people install R81.20 or something in lab and forget to update after to recent jumbo

-------
Please press "Accept as Solution" if my post solved it 🙂
0 Kudos
Nuggeteer
Contributor
‎2024-10-24 07:27 AM
In response to Lesley

I did see a jumbo version update was available so I updated SMS and Gateways. Now I'm getting a different error (see images).

Screen Shot 2024-10-24 at 10.14.28 AM.png

 

Error 2.png

 

Then I checked the cpm.elg file and is says:

Screen Shot 2024-10-24 at 10.20.56 AM.png

 So i took a look at the inactive-tx.ellg and the last entry is this:

========================================================================================
24/10/2024 10:22:04,083 EDT Transaction ended with no actual database access. Trace:
java.lang.Throwable
        at com.checkpoint.management.object_store.ObjectStoreSessionImpl.checkDirtyFlag(ObjectStoreSessionImpl.java:158)
        at com.checkpoint.management.object_store.ObjectStoreSessionImpl.commitTransaction(ObjectStoreSessionImpl.java:1000)
        at com.checkpoint.management.dleserver.coresvc.internal.ObjectStoreSessionManager.onAfterJpaTransactionCommit(ObjectStoreSessionManager.java:51)
        at com.checkpoint.management.dleserver.coresvc.internal.AbstractTransactionAwareBean$3.onNotification(AbstractTransactionAwareBean.java:1)
        at com.checkpoint.management.dleserver.coresvc.internal.InterBeanNotificationSvcImpl.notifySubscriber(InterBeanNotificationSvcImpl.java:258)
        at com.checkpoint.management.dleserver.coresvc.internal.InterBeanNotificationSvcImpl.publish(InterBeanNotificationSvcImpl.java:93)
        at com.checkpoint.management.dleserver.coresvc.internal.ObjectStoreJpaTransactionManager.doCommit(ObjectStoreJpaTransactionManager.java:199)
        at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:754)
        at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:723)
        at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:393)
        at org.springframework.transaction.aspectj.AbstractTransactionAspect.ajc$afterReturning$org_springframework_transaction_aspectj_AbstractTransactionAspect$3$2a73e96c(AbstractTransactionAspect.aj:78)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.invokeWebApiCommandTransactionalRW_aroundBody0(WebApiEntryPoint.java:567)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint$AjcClosure1.run(WebApiEntryPoint.java:1)
        at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
        at com.checkpoint.management.dle.aspects.OperationSyncAspect.syncRequiredForPublishOperation(OperationSyncAspect.java:109)
        at com.checkpoint.management.dle.aspects.OperationSyncAspect.syncOperation(OperationSyncAspect.java:62)
        at com.checkpoint.management.dle.aspects.OperationSyncAspect.ajc$inlineAccessMethod$com_checkpoint_management_dle_aspects_OperationSyncAspect$com_checkpoint_management_dle_aspects_OperationSyncAspect$syncOperation(OperationSyncAspect.java:76)
        at com.checkpoint.management.dle.aspects.OperationSyncAspect.aroundRequiredForPublishOperation(OperationSyncAspect.java:240)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.invokeWebApiCommandTransactionalRW_aroundBody2(WebApiEntryPoint.java:104)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint$AjcClosure3.run(WebApiEntryPoint.java:1)
        at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
        at com.checkpoint.management.dleserver.coresvc.internal.TransactionRetrySvcImpl.proceed(TransactionRetrySvcImpl.java:174)
        at com.checkpoint.management.dle.aspects.TransactionRetryAspect.aroundOperation(TransactionRetryAspect.java:16)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.invokeWebApiCommandTransactionalRW(WebApiEntryPoint.java:263)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.postEntryPoint(WebApiEntryPoint.java:589)
        at sun.reflect.GeneratedMethodAccessor1414.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
        at java.lang.reflect.Method.invoke(Method.java:508)
        at org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:180)
        at org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:96)
        at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:191)
        at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:101)
        at org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59)
        at org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:96)
        at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:309)
        at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
        at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:267)
        at org.apache.cxf.transport.http_jetty.JettyHTTPDestination.doService(JettyHTTPDestination.java:234)
        at org.apache.cxf.transport.http_jetty.JettyHTTPHandler.handle(JettyHTTPHandler.java:76)
        at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1129)
        at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1065)
        at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
        at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)
        at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)
        at org.eclipse.jetty.server.Server.handle(Server.java:497)
        at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310)
        at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)
        at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)
        at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)
        at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)
        at java.lang.Thread.run(Thread.java:825)

 
Thank you.
0 Kudos
Nuggeteer
Contributor
‎2024-10-24 11:43 AM
In response to Lesley

Yes, everything is up to date.

Looking at the original error message it looks like maybe the object is locked by an old session that is no longer live, but it's stuck. Like this: https://support.checkpoint.com/results/sk/sk168792

Can I fix this on my own? This is a lab that I use quite a lot to learn and test out blades with.

0 Kudos
PhoneBoy
Admin
Admin
‎2024-10-25 12:46 PM

What shows in $FWDIR/log/cpm.elg related to this?

0 Kudos
Nuggeteer
Contributor
‎2024-10-25 01:07 PM
In response to PhoneBoy

$FWDIR/log/cpm.elg output:

25/10/24 16:04:40,490 WARN INACTIVE_TRANSACTIONS [taskExecutor-61]: Transaction ended with no actual database access. See /opt/CPsuite-R81.20/fw1/log/inactive-tx.elg for details
25/10/24 16:04:40,492 WARN INACTIVE_TRANSACTIONS [taskExecutor-57]: Transaction ended with no actual database access. See /opt/CPsuite-R81.20/fw1/log/inactive-tx.elg for details
25/10/24 16:04:40,505 WARN INACTIVE_TRANSACTIONS [taskExecutor-57]: Transaction ended with no actual database access. See /opt/CPsuite-R81.20/fw1/log/inactive-tx.elg for details

 

/opt/CPsuite-R81.20/fw1/log/inactive-tx.elg output:


========================================================================================
25/10/2024 16:06:40,698 EDT Transaction ended with no actual database access. Trace:
java.lang.Throwable
at com.checkpoint.management.object_store.ObjectStoreSessionImpl.checkDirtyFlag(ObjectStoreSessionImpl.java:158)
at com.checkpoint.management.object_store.ObjectStoreSessionImpl.commitTransaction(ObjectStoreSessionImpl.java:1000)
at com.checkpoint.management.dleserver.coresvc.internal.ObjectStoreSessionManager.onAfterJpaTransactionCommit(ObjectStoreSessionManager.java:51)
at com.checkpoint.management.dleserver.coresvc.internal.AbstractTransactionAwareBean$3.onNotification(AbstractTransactionAwareBean.java:1)
at com.checkpoint.management.dleserver.coresvc.internal.InterBeanNotificationSvcImpl.notifySubscriber(InterBeanNotificationSvcImpl.java:258)
at com.checkpoint.management.dleserver.coresvc.internal.InterBeanNotificationSvcImpl.publish(InterBeanNotificationSvcImpl.java:93)
at com.checkpoint.management.dleserver.coresvc.internal.ObjectStoreJpaTransactionManager.doCommit(ObjectStoreJpaTransactionManager.java:199)
at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:754)
at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:723)
at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:393)
at org.springframework.transaction.aspectj.AbstractTransactionAspect.ajc$afterReturning$org_springframework_transaction_aspectj_AbstractTransactionAspect$3$2a73e96c(AbstractTransactionAspect.aj:78)
at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl.getOsIdShort_aroundBody254(WorkSessionMgmtSvcImpl.java:3098)
at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl$AjcClosure255.run(WorkSessionMgmtSvcImpl.java:1)
at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
at com.checkpoint.management.dleserver.coresvc.internal.TransactionRetrySvcImpl.proceed(TransactionRetrySvcImpl.java:174)
at com.checkpoint.management.dle.aspects.TransactionRetryAspect.aroundOperation(TransactionRetryAspect.java:16)
at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl.getOsIdShort(WorkSessionMgmtSvcImpl.java:1426)
at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl.discard(WorkSessionMgmtSvcImpl.java:1514)
at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl.discard(WorkSessionMgmtSvcImpl.java:1939)
at com.checkpoint.management.dleserver.coresvc.internal.LoginSvcImpl.logoutConsiderDiscard(LoginSvcImpl.java:3993)
at com.checkpoint.management.dleserver.coresvc.internal.LoginSvcImpl.logoutWithRequest(LoginSvcImpl.java:392)
at com.checkpoint.management.web_api_is.utils.RemoteSessionUtils.logout_aroundBody4(RemoteSessionUtils.java:118)
at com.checkpoint.management.web_api_is.utils.RemoteSessionUtils$AjcClosure5.run(RemoteSessionUtils.java:1)
at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
at com.checkpoint.management.web_api_is.aspects.logging.WebApiMethodLoggerAspect.aroundMethodLoggerTest(WebApiMethodLoggerAspect.java:16)
at com.checkpoint.management.web_api_is.utils.RemoteSessionUtils.logout(RemoteSessionUtils.java:173)
at com.checkpoint.management.web_api.core.handler.commands.session.logout.WebApiLogoutRequestHandler.logout(WebApiLogoutRequestHandler.java:4)
at sun.reflect.GeneratedMethodAccessor1739.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:508)
at com.checkpoint.management.web_api_is.utils.WebApiReflectionUtils.invoke(WebApiReflectionUtils.java:1)
at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.invokeWebApiCommand(WebApiEntryPoint.java:367)
at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.postEntryPoint(WebApiEntryPoint.java:454)
at sun.reflect.GeneratedMethodAccessor1414.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:508)
at org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:180)
at org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:96)
at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:191)
at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:101)
at org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59)
at org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:96)
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:309)
at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:267)
at org.apache.cxf.transport.http_jetty.JettyHTTPDestination.doService(JettyHTTPDestination.java:234)
at org.apache.cxf.transport.http_jetty.JettyHTTPHandler.handle(JettyHTTPHandler.java:76)
at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1129)
at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1065)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)
at org.eclipse.jetty.server.Server.handle(Server.java:497)
at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310)
at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)
at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)
at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)
at java.lang.Thread.run(Thread.java:825)

 

Thank you!

 

0 Kudos
Amir_Senn
MVP Silver CHKP MVP Silver CHKP
MVP Silver CHKP
‎2024-10-27 04:17 AM

Maybe another session has lock on this object?

You can check it (see attached).

Kind regards, Amir Senn
Preview file
31 KB
0 Kudos
Nuggeteer
Contributor
‎2024-10-28 06:38 AM
In response to Amir_Senn

I checked again and still no locks showing up.

Screen Shot 2024-10-28 at 9.37.20 AM.png

 

0 Kudos
Nuggeteer
Contributor
‎2024-10-28 07:23 AM
In response to Amir_Senn

I also tried these two SK's dealing with locked objects and sessions and these both came up with no locks either.

https://community.checkpoint.com/t5/Management/How-to-release-lock-from-objects-in-R80-10/td-p/6969

https://community.checkpoint.com/t5/Management/clear-disconnected-sessions/td-p/33027

 

0 Kudos
Nuggeteer
Contributor
‎2024-10-28 07:53 AM
In response to Amir_Senn

I decided to just rebuild the second gateway in the lab. After having the old gateway powered off for a while I decided to try to delete it from SmartConsole again and it let me do it this time. Really weird. No need to continue troubleshooting this issue. Thanks for all the suggestions!

 

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

View All ≫
Upcoming Events

    Sort by:
    CheckMates Events