Appliance 1490 R77.20.87 build 150

[firebird]

Hi, have identified two issues with my CP1490 local managed.  R77.20.87 Build 150

1st.  I have noticed, that randomly and mostly occurs after a month of firewall uptime, the following warning message. 

daemon.warn dnsmasq[4653]: Maximum number of concurrent DNS queries reached (max: 150)

I do have a TAC case and appears there are other two cases of similar issues but on R81.   Does not seem to affect my traffic at all.  

2nd.  I use WatchTower app, when I login where you can click on protected devices.  I see the list of my devices but beside them have a ?.   When I try to access it, in past it used to bring some details of the device, now I get gateway not reachable but also on my system logs get the following error msg.  

user.err root: [System error] CODE_SYS_ERROR (000.000.000) - /usr/local/share/lua/5.1/sys/LCM.lua:0: Can not call controller method: wirelessHostMonitor:getWirelessHostMonitorData not found. (Log reference: 1689420473)

One note to make is as am currently working through the upgrade to appliance, the current CP1490 no longer has any blade SS.  so it's just basic firewall and wondering for that to work in past as it did I had the IPS blade enabled?

thoughts? 

[G_W_Albrecht]

What firmware is this, R77.20.87 (990173120) ?

[firebird]

No, am using a custom firmware above B120 GA.  r77.20.87 B150 contains additional fixes and some critical vulnerabilities  beyond B120.   

[G_W_Albrecht]

Is there a valid support contract on the box ? If not, WatchTower and ReachMyDevice may not work...

[firebird]

There is the firewall licenses and other services that never expire but I no longer have SS on blades.  WatchTower continues to operate and alert on push notifications when devices connect as it should, firewall license is never expire.  The issue here is when it sees the devices it now has a ? beside it and attempting to look at it, causes the error, that maybe related to no blades enabled.   However, to reach the device and so forth should not be impacted.  

[Chris_Atkinson]

The IPS & Threat blades generally require a license for use/updates. It's unclear if this is related and should be verified with TAC.

[firebird]

Thanks, am aware that blades require SS.  Question is specific to WatchTower error per above is it by design due to not have the blades enabled?  Have a TAC