- Products
- Learn
- Local User Groups
- Partners
- More
CheckMates Fifth Birthday
Celebrate with Us!
days
hours
minutes
seconds
Join the CHECKMATES Everywhere Competition
Submit your picture to win!
Check Point Proactive support
Free trial available for 90 Days!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
The 2022 MITRE Engenuity ATT&CK®
Evaluations Results Are In!
Now Available: SmartAwareness Security Training
Training Built to Educate and Engage
MITRE ATT&CK
Inside Check Point products!
CheckFlix!
All Videos In One Space
Hi there! We are facing a problem with the 80.30 version of our gw.
Messages from /var/log/messages:
CIFS VFS: Send error in SessSetup = -11
CIFS VFS: cifs_mount failed w/return code = -11
CIFS VFS: Server X.X.X.X has not responded in 120 seconds. Reconnecting...
cvpnd[3728]: segfault at 76c ip 00000000f6f1f080 sp 00000000ffbbed60 error 4 in libCvpnIsLogging.so[f6f11000+15000]
Notice that:
1 - The server X.X.X.X is responding ICMP.
2 - The command df -h stucks and takes a long time to respond. Sometimes freezes the ssh connection to the GW.
3 - The command top freezes the terminal too.
When I make a manual switchover to the other secutiry appliance, everything gets fine.
Thanks all in advance, Any help is welcome!
Hi there!
1 - Enabling the ClusterXL (Sync by exclusive IF) - all functional.
2 - Defining a File Sharing in Mobile Access (indexing by IP, not the FQDN) to the File Server (one per group of users - 45 mounting points in total).
3 - Defining the access only for the shared folder to the user's group.
This cause a error CIFS VFS describe in /var/log/message:
Jun 26 18:03:08 2020 XXXX kernel: CIFS VFS: cifs_mount failed w/return code = -112
Jun 26 18:08:41 2020 XXXX kernel: CIFS VFS: Send error in SessSetup = -11
Jun 26 18:08:41 2020 XXXX kernel: CIFS VFS: cifs_mount failed w/return code = -11
Jun 26 18:08:41 2020 XXXX kernel: CIFS VFS: Send error in SessSetup = -11
Jun 26 18:08:46 2020 XXXX kernel: CIFS VFS: Send error in SessSetup = -11
Jun 26 18:08:46 2020 XXXX kernel: CIFS VFS: cifs_mount failed w/return code = -112
After these errors, with the other Security Gateway (let's call YYYY) started, the Mobile Access Portal (only in the File Sharing portion of the site) stops working. All other functions, like SNX, Native Applications and Web Applications runs normally.
So, I was need to execute the following commands to recover:
clusterXL_adminXL down;cvpnstop;cvpnstart;clusterXL_admin up (the cvpnrestart do not work at all - strange).
When I tried to solve this problem, taking out the YYYY from the cluster com cpstop, for my suprise, these errors remains, but the File Sharing system do not stucks, I mean, the system freezes for 1 minute (or less), but recovers by itself.
When in cluster, It used to take 30 minutes or more and now, the segfault error do not appear anymore.
When I was Googling this error (CIFS -11), it describes that the server is unreacheable, but the server responds pings normally during the occurrence of this issue.
This issue occurs at anytime. Is completely aleatory even non-working hours.
Hi!
I created another topic with the solution:
https://community.checkpoint.com/t5/Remote-Access-VPN/Mobile-access-blade-with-segfault/td-p/114354
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY