maas_export_tools failed - thinks it's not an SMS!

[stallwoodj]

Hi Check Point,

When I ran an export to Smart-1 Cloud I got the following message:

/var/log/tmp/ maas_export_tools customer-abcd1234.sh
jq: error: Cannot iterate over null
Logout failed
Export to Smart-1 Cloud is supported from Security Management Server only.

Of course the problem was not that it wasn't a manager, but that the API wasn't running.

Might be worth the script running "api start" first, and/or updating the doucument at https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-...

Thanks!

Jamie

[genisis__]

I have the same issue, and yes API status is good.

[the_rock]

Cant say if its different in recent versions, but I had done this twice in R80.40 and once in base R81 and worked 100%, no issues. Never really bothered to check API status when exporting regular mgmt, but obviously it was fine, since S1C import worked.

Did you reach out to TAC?

Best,

Andy

[genisis__]

Have a call running with them, but I suspect may need to log this as a new issue - need to search around the KB first though.

[genisis__]

# cpinfo -y all

This is Check Point CPinfo Build 914000239 for GAIA
[IDA]
No hotfixes..
[MGMT]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 130
[CPFC]
No hotfixes..
[FW1]
HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE
HOTFIX_NGM_DOCTOR_AUTOUPDATE
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 130
HOTFIX_GOT_MGMT_AUTOUPDATE
HOTFIX_WEBCONSOLE_AUTOUPDATE
HOTFIX_GOT_TPCONF_MGMT_AUTOUPDATE

FW1 build number:
This is Check Point Security Management Server R81.10 - Build 018
This is Check Point's software version R81.10 - Build 055
[SecurePlatform]
HOTFIX_ENDER_V17_AUTOUPDATE
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 130
[AutoUpdater]
No hotfixes..
[CPinfo]
No hotfixes..
[DIAG]
No hotfixes..
[Reporting Module]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 130
[CPuepm]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 130
[VSEC]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 130
[CPDepCon]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 130
[CPRepMan]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 130
[SmartLog]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 130
[SFWR77CMP]
HOTFIX_R81_10_JHF_COMP Take: 130
[SFWR80CMP]
HOTFIX_R81_10_JHF_COMP Take: 130
[R77CMP]
No hotfixes..
[R8040CMP]
HOTFIX_R81_10_JHF_COMP Take: 130
[MGMTAPI]
No hotfixes..
[CPUpdates]
BUNDLE_DANA_AUTOUPDATE Take: 138
BUNDLE_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE Take: 20
BUNDLE_NGM_DOCTOR_AUTOUPDATE Take: 23
BUNDLE_TUNNEL_AUTOUPDATE Take: 93
BUNDLE_ESOD_CSHELL_AUTOUPDATE Take: 19
BUNDLE_ENDER_V17_AUTOUPDATE Take: 24
BUNDLE_CPVIEWEXPORTER_AUTOUPDATE Take: 27
BUNDLE_CPOTELCOL_AUTOUPDATE Take: 70
BUNDLE_CPSDC_AUTOUPDATE Take: 29
BUNDLE_R81_10_JUMBO_HF_MAIN Take: 130
BUNDLE_DC_CONTENT_AUTOUPDATE Take: 15
BUNDLE_GOT_MGMT_AUTOUPDATE Take: 116
BUNDLE_DC_INFRA_AUTOUPDATE Take: 30
BUNDLE_WEBCONSOLE_AUTOUPDATE Take: 90
BUNDLE_HCP_AUTOUPDATE Take: 62
BUNDLE_GOT_TPCONF_MGMT_AUTOUPDATE Take: 36
[hcp_wrapper]
HOTFIX_HCP_AUTOUPDATE
[itp_wrapper]
HOTFIX_GOT_MGMT_AUTOUPDATE
[R7540CMP]
No hotfixes..
[R76CMP]
No hotfixes..
[SFWR81CMP]
No hotfixes..
[CPDepInst]
No hotfixes..
[cpsdc_wrapper]
HOTFIX_CPSDC_AUTOUPDATE
[CPotelcol]
HOTFIX_OTLP_GA
[CPviewExporter]
HOTFIX_OTLP_GA
[infinity_onprem_wrapper]
HOTFIX_TUNNEL_AUTOUPDATE
[sho_wrapper]
HOTFIX_DANA_AUTOUPDATE

# $CPMDIR/scripts/check_cpm_status.sh
CPM server started
# cpstat os

Product Name: SVN Foundation
SVN Foundation Version String: R81.10
SVN Foundation Build Number: 996000057
SVN Foundation Status: OK
OS Name: Gaia
OS Major Version: 3
OS Minor Version: 10
OS Build Number: -
OS SP Major: -
OS SP Minor: -
OS Version Level:
Appliance SN:
Appliance Name: VMware Virtual Platform
Appliance Manufacturer: VMWare

# fwm ver
This is Check Point Security Management Server R81.10 - Build 018

# cpprod_util FwIsPrimary
1

# ./maas_export_tools_xxxxxx.sh
Management object is not found.
Export to Smart-1 Cloud is supported from Security Management Server only.

# cat maas_export_log_2024.01.31_22.24.07.elg
[2024.01.31_22.24.07]: Target version from parameter: R81.20
[2024.01.31_22.24.07]: Detected version: R81.10

I cannot see anything obviously wrong - so I've now raised a TAC case.

[the_rock]

Looks right to me and api status shows api running?

Andy

[genisis__]

API status running:

# api status

API Settings:
---------------------
Accessibility: Require local
Automatic Start: Enabled

Processes:

Name State PID More Information
-------------------------------------------------
API Started 18130
CPM Started 18130 Check Point Security Management Server is running and ready
FWM Started 17672
APACHE Started 16871

Port Details:
-------------------
JETTY Internal Port: 61149
JETTY Documentation Internal Port: 53519
APACHE Gaia Port: 443

Profile:
-------------------
Machine profile: Large SMC env resources profile without SME
CPM heap size: 12288m

--------------------------------------------
Overall API Status: Started
--------------------------------------------

API readiness test SUCCESSFUL. The server is up and ready to receive connections

Notes:
------------
To collect troubleshooting data, please run 'api status -s <comment>'

[the_rock]

I got nothing else then, sorry mate.

Andy

[genisis__]

no worries, let's see what TAC say.

[the_rock]

Yes, lets see.

Andy

[cdooer]

Did TAC ever figure this out? Having the same issue. 

[genisis__]

Yes - so in my case there where two issue (which should have been integrated for all new instances).
Import:
- Java Heap size needed increasing

Export:
- ignore-warnings parameter to be used so that warning would come up, but the export would be successful.

[cdooer]

Ok, thx for responding. I tried increasing the java heap size as well, didn't fix the issue though. 

[Expert@fwmgr1:0]# mgmt_cli -r true show-group name ”servers” --format json | jq '.members[] | [.name, ."ipv4-address",.subnet4,."mask-length4"] |@csv' -r
jq: error: Cannot iterate over null

[genisis__]

Both sets of changes I've mentioned where at the Tennant end, not at your On-Prem device.  TAC need to change it, again if it is indeed the same issue.