Updating S1C smart console

[the_rock]

Hey guys,

Apologies if this may sound like a really silly question, but I cant seem to figure this out for the life of me. So, I see an option to update smart console in infinity portal, I click on it, says install, all great, but then when pop up window shows up, it NEVER gives option to click yes, just no lights up. I tried different browsers, private incognito windows, same problem.

Any idea how to get around it?

Thanks!

[the_rock]

Im positive this is why it fails, just not sure how to fix it. I am super admin, nothing was changed as far as updates...really odd. If anyone has an idea, happy to try 🙂

 

[israelfds95]

That’s definitely a strange issue. I’ve never seen this specific error before.
My suggestion would be to manually download the latest recommended SmartConsole version (currently build 1063), install it, and see if the problem persists.
If the issue continues after the manual update, I recommend opening a support case with Check Point TAC for further investigation.

Best Regards my friend

[the_rock]

Hey Israel,

I think I may do that tomorrow morning. Btw, for what is worth, I did download latest smart console, upload to s1c home folder, BUT, does not give option to install it manually, you can either rename, delete or download the file, thats it.

Let me see if I can fix it myself, but if not, will open TAC case Friday morning.

[the_rock]

Thought this was gonna work, but sadly no...

I found guidbedit value for auto_update, set it to true, saved, pushed policy and installed database, tried again, same problem.

[israelfds95]

sad it didn’t work, really strange error, especially since you’re running as admin on a machine with admin rights. Very bizarre. If you find a solution, please let us know! If this happens to any of my customers, I’ll be aware of it. I’ll ask my partners as well, and if anyone has any information about it, I’ll let you know here.

[the_rock]

I will get the case opened tomorrow morning when I start work. Maybe someone else responds with an idea, but I even restarted S1C instance, same issue. Here is something a bit odd...when I rebooted the instance, I checked guidbedit and auto_update defauled back to false, instead of true, so I will ask TAC to see if they can change it permanently on their end and update.

[the_rock]

I ended up opening TAC case, told them its low priority, so they can check Friday. Will keep you posted.

[the_rock]

Hey brother,

Just to update you quick. TAC engineer messaged me, but we did not do remote, so may do that next week, but what I did was download smart console on my home laptop, logged in using smart cloud identifier, updated smart console, but that did not change version for streamed smart console, sitll shows old one and updates are disabled by user.

Very odd indeed, but I honestly have no clue in the world how to fix it myself at this point, as I tried so many things already.

Anyway, will see what TAC says Monday.

[JozkoMrkvicka]

It is possible to disable automatic updates of SmartConsole. I did it already for Windows machines without internet connection. You just need to modify SmartConsole configuration file.

I am not sure if this will work in Infinity Portal, but lets try:

Automatic updates for SmartConsole

[the_rock]

Hi Jozko,

I found that sk last night when I was checking this, but sadly, does not seem to apply to S1C. Lets see what TAC comes back with. I will let you guys know.

[TomerLev]

Hey Andy
Alignment about the 3 possible clients you can work with S1C and how they update:
1. Installed SmartConsole - this is the user's responsibility to work with the relevant version installed on their computer. (currently 82.10, BTW all S1C tenants are already on 82.10)

2. Web SmartSconsole (built in UI on the portal- this is the recommended way to work) is updates seamlessly and continuously as part of the service.

3. Streamed SmartConsole version is updates seamlessly & periodically as part of the service.

If this still leave any question open you can clarify when handling the SR, or reach out if needed

Good luck
Tomer

[the_rock]

I see that instance was updated to R82.10, so let me verify. I will send a screenshot of what I get.

[the_rock]

Hey @TomerLev 

Here is what I get even with R82.10

So no updates, thats why it shows gree, BUT, I can guarantee you next time there is an update, it wont work, since it shows updates disabled by user. Why does it show that and how to fix it? Any idea?

  

[TomerLev]

When it gave you "need to update" message, you got this message lunching Streamed SmartConsole ?

[the_rock]

Yes sir! All of those are from streamed smart console.

[the_rock]

Hey Tomer,

I have TAC case already for this, but so far, have not gotten any further. FWIW, now that version is on R82.10, I cant even access guidbedit, which I was able to back in R82. I was really hoping my TAC case would have been assigned to someone who has cloud backend access, but does not appear so.

[the_rock]

Hey Tomer,

No rush on this at all, but I did directly message you the TAC case number as well.

Have great rest of your day!

[the_rock]

Hey guys,

I really have gut feeling (aka logical one) that based on my testing, since updates are enabled when logging into standalone smart console on windows PC using cloud identifier, that this could be limitation for updates on web streamed smart console, but I will let someone from Check Point confirm if Im right or wrong.

I dont sadly have proof of this, just saying it based on logic and testing I had done so far. I did same tests for 4 S1C clients I have access to and it was exactly the same result.

[the_rock · Accepted solution]

I got the answer I was looking for and Im okay with this. Ended up speaking with senior TAC guy and he informed me that auto updates are intentionally disabled on S1C, which makes total sense and best thing to do is simply log in using cloud identifier on standalone smart console, which is what I did and that shows updates are enabled, which is on by default anyway.

Thanks everyone for your inputs!

[TomerLev]

Just to fine-tune about auto update, If the TAC guy meant Streamed SmartConsole, it is periodically updated and not auto updated.  The Web SmartConsole on the S1C portal is continuously updated and you always get the latest version. 

[the_rock]

Yes, fair enough.

[the_rock]

Hi Tomer,

Please forgive me if this may sound silly/ignorant what I will ask, but Im trying to make sure Im not missing something here...since this is S1C, isnt streamed smart console technically equal to web smart console for regular management?

I ask this because when you log into portal itself and go to management portion, does not give any option there to update the smart console.

[TomerLev]

Hey Andy
To your question:  isn't Streamed SmartConsole technically equal to web smart console for regular management?
The answer is no - Streamed SmartConsole is the regular (legacy) Windows SmartConsole that is streamed through a browser.

Web SmartConsole is the native Web client (that is available on the onPrem Management as well) which is built in the S1C Portal UI, this is the recommended way to work on S1C, easy and smooth.  That client still doesn't have all capabilities of the legacy SmartConsole but we are aggressively closing that gap. 

Streamed SmartConsole advantage is that you get all SmartConsole capabilities via browser, the downside is that it is slower.  Down the road when all day to day actions will be available on Web SmartConsole (i.e. on the portal), we will sunset Streamed SmartConsole. 

Tomer

[the_rock]

K, got it!