Web SmartConsole service is not available.

[AfterMath]

Hi Guys!

Im getting this error bellow.. (Web SmartConsole service is not available.) Im running r81.10

 

[the_rock]

I just tested on my R81.10 and R81.20 lab and worked fine, no issues at all. Can you verify below commands on mgmt server ssh:

cpwd_admin list

watch -d  $FWDIR/scripts/./cpm_status.sh

api status (look at the bottom, it should say SUCCESSFUL)

2nd command should return server is up and ready (ctrl+c to stop). Maybe try different browsers, verify srandalone smart console works, but since its mgmt, its easy to do quick cpstop; cpstart or reboot, if you can.

Cheers mate.

Andy

[AfterMath]

Hi @the_rock!
 

 

[the_rock]

Glad it worked, I marked that sk as a bookmark, super useful if I ever see that issue myself.

[PhoneBoy · Accepted solution]

You said R81.10, what JHF level?
How much RAM is allocated to your management?
See also: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

[AfterMath]

Hi @PhoneBoy 

JHF 66

[svori · Accepted solution]

Hi,

Check sk173968 and Issue no1, for me it helped to just restart the service.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[the_rock]

Thanks for that sk, made note of it, good to know 👍

[navef]

Hi!
Can you try to run 'wsc restart' to restart the service?

Please let me know if it fixed the problem

[the_rock]

I believe its step 3 from the sk that @svori provided.

[navef]

Yes, issue #1 step 3.
@PhoneBoy doe's it work now?

[the_rock]

Considering @AfterMath marked both answers as solution, Im fairly positive that sk is what fixed it.

Cheers,

Andy

[AfterMath]

Yes @the_rock 

Issue 1: "Web SmartConsole service is not available.

[the_rock]

Seems like @Ofir_Calif has correct file that would solve this. I gave those files to @AfterMath from my R81.20 lab, but does not appear they helped.

Sorry, was thinking of another post recently...same issue...

https://community.checkpoint.com/t5/Management/Web-SmartConsole-is-not-available-after-R81-10-Upgrad...

[Roadrunner88]

I am getting the same erreor after upgrading to 81.20

all hints to solve error i found so far are not working.

docker tells me following:

[Expert@xxxxxxxxxxx:0]# docker container ls
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
2b9xxxxxxx mwc:latest "node dist/index.mjs" 42 seconds ago Restarting (1) 12 seconds ago mwc
00xxxxxxxx endpoint-web-management:8.5.5 "node --max-http-h..." 26 minutes ago Up 26 minutes epwm
80xxxxx business_logic:latest "node server/serve..." About an hour ago Up 28 minutes bltp
xxxxxxxxxx9 mgmtcomp-diff-report-server:latest "node -r dotenv/co..." About an hour ago Restarting (1) 48 seconds ago diff_report_server

The docker logs tells me

2023-04-11T09:25:03.589054743Z Error reading file EACCES: permission denied, open '/app/storage/crs_MGMT.xml'
2023-04-11T09:25:03.592106307Z node:fs:594

how can I fix this?

[Ofir_Calif]

Hi @Roadrunner88 ,

sorry for the inconvenience.
we are familiar with this issue and working on releasing a new Web SmartConsole with a fix.
for now, I will send you a fix that will solve this issue for you.

Thanks,
Ofir.

[milunb]

Hi, 
Is the new Web smart console already released or is it still being worked on?
If not yet, can you also send me a fix for this issue.

br

Milun

[Ofir_Calif]

Hi @milunb ,

The new Web SmartConsole is still in progress and will be released soon.

here you can find a solution for this issue:
https://community.checkpoint.com/t5/Management/Web-SmartConsole-is-not-available-after-R81-10-Upgrad...

Thanks,

Ofir.

[Jerry]

hi guys

got a tricky one for your, here is the scenario of one of my clients device:

1. WebSmartConsole works perfectly when the Security Managment GUI Clients has "Type (Any) Hostname/IP Address (Any) Mask -

2. When you try to secure that to the IPv4 or IPv6 of ANY sort - Web SmartConsole shows you that your not authorised to use that from that computer - meaning it refuse to open

3. None of the tricks to make the GUI Clients with wider CIDR or whatever IP you can imagine work, meaning that ONLY making GUI Clients ANY/ANY make the Web SmartConsole works just perf. fine (logging in, using it - all in all).

Any ideas? Happy to provide config/sets if needed but overall the message is like that:

Only ANY/ANY in GUI Clients for that particular FWM works. Any IP you put + remove ANY/ANY afterwards makes Web SmartConsole NOT DISPLAYING any longer.

any hints/tips highly appreciated as always.

[the_rock]

Wow M8, never heard of that. Just to make sure, you are talking about below setting?

Andy

This?

 

OR this?

 

OR BOTH??

[Jerry]

BOTH. Both MUST be ANY/ANY otherwise the Web SmartConsole won't pop up by any network leads etc. 100% tested.

[the_rock]

Which version? I will test this later in R81.20 jumbo 26

Andy

[Jerry]

R81.20 Jumbo Hotfix Take 24

ps. your both screenshots shows actually the same setting, didn't you realised that what you do in GUI Clients (WebPortal) and TrustedClients (SmartConsole Client) actually equals mate?

[the_rock]

Yes, I know, was just confirming...M8, please, STOP being stroppy with me ; - )

Sorry, had to say it HAHAHA

Andy

[Jerry]

love you mate - your sense of H. kills me each time we talk/chat 😄 ROTFL

[the_rock]

I try 😉

[the_rock]

Love you too bro, as good old DJ Bobo used to sing "Love is all around" hehehe

[Ofir_Calif]

Hi @Jerry , @the_rock ,

Which version of Web SmartConsole do you have? 

you can run "cpinfo -y CPUpdates" and search for WEBCONSOLE_AUTOUPDATE.

in addition, are you on MDS machine?

in general, WSC does work with trusted clients.
You can open a support ticket and we will have a session to check it further.

[the_rock]

Hey Ofir,

Here is my lab, latest take of R81.20

Andy

[Expert@QUANTUM-MANAGEMENT:0]# cpinfo -y CPUpdates

This is Check Point CPinfo Build 914000234 for GAIA
[CPUpdates]
BUNDLE_ESOD_CSHELL_AUTOUPDATE Take: 19
BUNDLE_CPVIEWEXPORTER_AUTOUPDATE Take: 27
BUNDLE_CPOTELCOL_AUTOUPDATE Take: 25
BUNDLE_R81_20_JUMBO_HF_MAIN Take: 26
BUNDLE_ENDER_V17_AUTOUPDATE Take: 24
BUNDLE_VCE_R81_20_AUTOUPDATE Take: 15
BUNDLE_MINMUS_AUTOUPDATE Take: 15
BUNDLE_KERBIN_AUTOUPDATE Take: 34
BUNDLE_NGM_DOCTOR_AUTOUPDATE Take: 23
BUNDLE_INFRA_AUTOUPDATE Take: 58
BUNDLE_DEP_INSTALLER_AUTOUPDATE Take: 25
BUNDLE_DC_CONTENT_AUTOUPDATE Take: 15
BUNDLE_WEBCONSOLE_AUTOUPDATE Take: 85
BUNDLE_TUNNEL_AUTOUPDATE Take: 93
BUNDLE_DANA_AUTOUPDATE Take: 138
BUNDLE_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE Take: 20
BUNDLE_HCP_AUTOUPDATE Take: 61
BUNDLE_GOT_MGMT_AUTOUPDATE Take: 112
BUNDLE_DC_INFRA_AUTOUPDATE Take: 30
BUNDLE_GOT_TPCONF_MGMT_AUTOUPDATE Take: 36
BUNDLE_CPSDC_AUTOUPDATE Take: 29
BUNDLE_CORE_FILE_UPLOADER_AUTOUPDATE Take: 21

[Jerry]

This is Check Point CPinfo Build 914000239 for GAIA
BUNDLE_WEBCONSOLE_AUTOUPDATE Take: 85