Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
dipisitrese
Explorer

Blades URL Filtering and Application Control "Not Responding" ?!...

Hello all,

Blades "URL Filtering" and "Application Control" are seen as "Not Responding" from our SmartConsole.
However, these two Blades have their Licenses active and not expired.


Could it be a cosmetic display issue? How can I be sure that the Blades continue to work?

 

Thanks a lot.

_____________

Technical infos :

Product version Check Point Gaia R81.10
OS build 335
OS kernel version 3.10.0-957.21.3cpx86_64
OS edition 64-bit

0 Kudos
9 Replies
Chris_Atkinson
Employee Employee
Employee

With reference to sk111944 has the machine been restarted recently?

CCSM R77/R80/ELITE
0 Kudos
dipisitrese
Explorer

Yes, one week ago.
The solution could be in the SK111944 ?

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Check the file contents as listed in the SK. If it looks ok and the problem persists with the latest JHF installed please contact TAC to investigate further.

CCSM R77/R80/ELITE
0 Kudos
dipisitrese
Explorer

Indeed we already provided to our Support-Registred the content of this file and we are waiting for a feedback...

0 Kudos
dipisitrese
Explorer

(
:status (0)
:status_short_desc ()
:status_long_desc ()
:app_update_status (up-to-date)
:app_update_description ("Gateway is up to date. Database version: 31012201.")
:app_next_update_description ("The next update will be run as scheduled.")
:app_db_version (31012201)
:urlf_status_code (0)
:urlf_status_short_description ()
:urlf_status_long_description ()
:appi_rad_status_code (0)
:appi_rad_status_description ("Application Control Engine is up and running")
:urlf_rad_status_code (0)
:urlf_rad_status_description ("URL Filtering engine is up and running")
:app_subscription_expiration_date ("Sun Dec 31 00:00:00 2023")
:app_subscription_status (valid)
:app_subscription_description ("Contract is up to date.")
:urlf_subscription_expiration_date ("Sun Dec 31 00:00:00 2023")
:urlf_subscription_status (valid)
:urlf_subscription_description ("Contract is up to date.")

0 Kudos
dipisitrese
Explorer

Is it a positive false ?...

The Blades continue to work despite of the warning on the SmartConsole ??

0 Kudos
Juan_
Collaborator

Yeah mate it keeps working.

Just check the logs:
blade:"URL Filtering" or blade:"Application Control"

the_rock
Legend
Legend

It could be false positive, but I would do what was suggested by @Chris_Atkinson and @Juan_ 

0 Kudos
Timothy_Hall
Champion
Champion

Probably just a cosmetic issue, but restarting all services as it says in sk111944 to resolve it is a bit of a blunt force instrument.

Generally when you are retrieving status from a gateway, the updates are provided by the cpd daemon on the gateway.  If that daemon is having issues it may log something into $CPDIR/log/cpd.elg that is helpful.  However I have seen restarting just the cpd daemon on the gateway clear a number of status issues (and doing so will not cause an outage).  Obviously this is not a long-term solution but can help identify where the problem is located.

There is also a daemon called cpstat_monitor but I believe that one is just for the advanced Traffic/System Counters reports provided by the monitoring blade and not for general status.

Finally there are a number of status databases maintained by cpd that can get corrupted in various ways (such as the SMS running out of disk space) causing strange status behavior.  The primary indicator of this condition is high CPU utilization by cpd or it occasionally crashing.  See these SKs:

sk101484: CPD is consuming high CPU utilization (>90%) or CPD is terminated on the Security Gateway

sk109940: CPD daemon consumes CPU at high level and exits periodically.

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events