SMB Devices Retaining Proxy Settings

[Waldo]

Hello,

I have a couple of SMB devices that have had proxy settings applied for them to go out to the internet for updates s/w upgrades etc.   We have disabled the proxy settings in the WebUI but can definitively see that the gateways are still attempting to use the proxy for these connections.

We have a couple of older 1400s plus a couple of newer 1800s (R80.20) displaying this same behaviour.

Has anyone seen this before and, if so, is there a known fix?

Thanks

[G_W_Albrecht]

Did you try using CLI ?

show proxy

set proxy disable

[Waldo]

Yes, but no joy I'm afraid,

here's the CLI output which did not change after re-applying the set proxy disable command.

show proxy
use-proxy: false
port: 8080
server: proxy.xxx.local

[G_W_Albrecht]

delete proxy

show proxy

[Waldo]

Hi,

Thanks again for the suggestions...  Deleting the proxy as suggested has removed any reference in the CLI to the old proxy which is a step forward for sure, however our internet gateway logs are still showing this internal gateway inside our network, trying to use our proxy server for connecting out to the internet.  Apart from reloading the gateway which is quite onerous to organize, are there any other suggestions/ideas out there?  

Thanks

[G_W_Albrecht]

You mean reboot ? That might resolve it by deleting cached configuration. Other possibility is to contact TAC, maybe using chat, to get this resolved.

What you could also try is these two commands that will recompile and reload the policy without reboot (usually used on locally managed SMBs):

fw_configload

fw reconf_sfwd

[Waldo]

Yes, I did mean reboot!😀

Thanks for the suggestions, all of which I will try.  I will feed back the results here as well.

I appreciate your help GWA. Thank you.

[Waldo]

G_W_Albrecht - Still struggling with this one...  Can you advise how I invoke TAC on chat as you suggested earlier please?

[G_W_Albrecht]

Go here: https://www.checkpoint.com/support-services/contact-support/ and click Chat with us. Then select Technical Support /Account Services and New Case. Select Technical and fill in the MAC as Asset.