Dear Team,
I have SMB appliance model 1530 which was managed centrally where Management Server and SMB appliance at located in different locations.
They both have connected by Static routing initially, later we changed to OSPF configuration.
Later, when we try to install policy on the device, the below errors triggers at differently at different times.
- SIC is not communicating, GeneralSIC error:148
- The IP:xx.xx.xx.xx gateway is not available.-
- Policy timeout.
We have reset the SIC multiple times, at that time sometimes able to install the policy but sometime not able to install the policy.
We are able to telnet from Gateway to Management Server by ports 18191,18200.
But using 18211 Connection refused.
We have raised OEMTAC case for this,
- Initially they also did reset the SIC and same thing happened on that time its working, after some time it is not working.
- They have collected he Policy debug logs from the Management Server and DrSpark file from the appliance.
Line 9740016: [FW_LOADER 9653 4145583936]@MGMT[23 May 15:05:36] SIC Error for InstallPolicy: timeout elapsed during authentication protocol.
Line 9740115: [FW_LOADER 9653 4145583936]@MGMT[23 May 15:05:36] opsec_auth_client_connected: SIC Error for InstallPolicy: timeout elapsed during authentication protocol.
Line 9740370: [FW_LOADER 9653 4145583936]@MGMT[23 May 15:05:36] CPTA_InstallFailReasonTranslate: error number 3048 Ip = 10.0.6.154: Resource temporarily unavailable
Line 9740392: Installation failed. Reason: SIC General Failure [ SIC error no. 148 ].
Based on their analysis, there are several factors.
-Insufficient system resources (CPU, memory, disk space)
-High load on the gateway at the time of policy installation
-Temporary network issues between the Management Server and the Gateway
-Too many concurrent operations (e.g., multiple policy installations, upgrades, or other heavy tasks) - # no tasks are running during policy installation.
Same verified over the logs as well, there is an issue with Peak connections which is causing issue with Memory.
====================================================================================================
For the temporary network issue, there is slight chance mostly because for the Same Management Server we are able to install the policy for different locations.
Before going to investigate network side, I want to know, what is the minimum or maximum memory and disk space utilization is required for running smoothly.
If the disk space don't have enough space what are all files can we remove so it doesn't have impact on production.
Peak connections was set to 150000 in SmartConsole.
For reference screenshot attached.
Regards,
Saranya
