Reset 1450 (Gaia imbedded) expert password

[YounesIP10]

Hi all,

I have a 1450 appliance that needs the expert password to be reset.

Any suggestions?

Thank you in advance 🙂

[PhoneBoy]

Personally never seen an SMB appliance require the Expert password for a factory reset.
In any case, you can download the latest firmware to a USB drive, insert into the appliance and power cycle.
The appliance will be factory reset with the latest firmware.
This is the recommended approach if your factory firmware version is not the most recent.

[YounesIP10]

Thanks PhoneBoy for your quick answer!

Sorry that I did not precise that the reset I am talking about is a remote once.

Just to give you an idea about the environment: 1450 is in a remote site and is managed using SmartConsole R80.x

So with all those elements, the question would be: is there any possibility to reset the Expert password using the Clish or from the SmartConsol?

[PhoneBoy · Accepted solution]

Clearly haven't had enough coffee yet 🙂
See Option 3 here: https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&eve...

[the_rock]

Thats it, what phoneboy said 🙂

sk106025

[A_D_A_M]

Hi together, hopefully someone can help me.

I need to reset the Expert PW on a 1450 with R77.20 OS

If i do so i got the following error message

set expert password-hash 2u5z76lkahhT.
Setting expert password with hash
Expert password already set
Set expert password failed

can someone tell me how i can reset it ? 

Thanks in advance

[_Val_]

Did you try sk106025?

[A_D_A_M]

Hi, thanks for your answer, yes i did but i was also not able to create a scp user on the GW.

Anyway I set the GW on Factory defaults and now i could not set up the SIC communication between the Management Server and the GW

crazy 

Adam

[the_rock]

I did option 3 and 5 from that sk before and both worked fine. SIC is totally different issue now...did you make sure CPD process is running? Can you ping back and forth?

Andy

[A_D_A_M]

no, both sites not able to ping the other. I need to explain, this GW is an remote GW (not in a cluster) and actual not in the company network. It will use a dynamic address and should get all policys from the Management Server. Actual i am rebooting the GW

[the_rock]

Well, until at least ping works, no point debugging CPD process.

[A_D_A_M]

Hi, still not running as needed. What i have done right now.

give GW a fixed IP no longer on dynamic

changed SIC on all devices Cluster runnig wonderfull single GW not

added the public IP into GW hosts file

checked date / time

In the logs in GAIA i can see both devices communicating

it shows also trust established (green) but ich you click on Test Sic Status it shows no connection to IP x.x.x.x

Someone any idea

Thanks 

[PhoneBoy]

Have you done a tcpdump on the management and/or the device to see what's happening when you click on the "Test SIC Status" button?