Check Point SMB gateway long boot time

[Ob1lan]

Hi,

For a remote site we have a 1430/1450 appliance running on Gaia Embedded R77.20. We were told by local IT they often have powedr outages, and once the power is back the connectivity returns only after about 45 minutes. 

I checked the firewall and rebooted it manualy to measure how long it takes to come back: about 30-40 minutes. 

I believe this is taking too much time to reboot. How can I investigate the reason why it's taking so long to return in a operational state ? What can I check on that FW ?

Many thanks for your advises and guidance on that matter.

Regards,

Antoine

[G_W_Albrecht]

To see the cause of the issue you have to connect to console port and initiate the reboot by CLI. Now you can watch and save to a file all messages during reboot - this is an issue for sure!

[Ob1lan]

Hi, thanks for your answer. I'm unable to physically access the device, the remote site where it's been setup is in another continent. Also, there are no local IT presence in that country, all we can ask is for a user to reboot the appliance by using the switch (there is no tech people there). 

Can we reboot it via SSH and still have the boot sequence logged for review ?

[G_W_Albrecht]

Locally this is possible if you use a second internet connection for the laptop and control it by remote - SSH can not show the boot sequence 😎 as it is not started yet.

I would contact TAC for help and - my thought - RMA, as this does not sound like a software issue!

[_Val_]

No, you have to have a physical connection. Do a zoom with someone who can at least connect a cable to the console port and follow your instructions.

[Chris_Atkinson]

Which precise software version & build is used?

[Ob1lan]

Hi, so that's a 1430 appliance running R77.20.87 (990173042).

Thanks.

[Chris_Atkinson]

For awareness build 3120 is available from sk153433

[Ob1lan]

Thanks, I will try to install it just to be sure to rule this out.

[PhoneBoy]

Normally, it should take ~5 mins to boot a 1450.
30-40 minutes points to an issue that will require investigating by the TAC.
Maybe dmesg will have something, but watching console messages at boot is the most likely to provide insight as to why,

[the_rock]

Wow, thats tricky situation, for sure. Im just thinking, say, for argument's sake, if this was regular Gaia appliance (not smb), what @G_W_Albrecht suggested makes total sense to me as well. Because, say after box is back up after 45 minutes, then looking in logs might not show you at all why it took so long, so having it reviewed it via console access while its rebooting seems like the best idea.

Not sure at this time what TAC may suggest you do, because, even if they RMAd the appliance, well, if there are power issues at that location, who is to say that new box wont have same problem say 3 months down the road.

Just my 2 cents...

[G_W_Albrecht]

If i have a spare replacement, i can send it to the remote location, replace the faulty one and test it in my lab. If it does work there, the location is ready for checkup...