Cannot access web UI Gaia R77.30 appliance 4400

[uhkh57]

Hi Guys,

I have a checkpoint appliance 4400, this firewall run in R77.30 

I had restore the R77.30 image with the boot menu (without usb key)

I can access at clish by ssl or serial.

But, when I want connect in the web UI with management IP I see  "ERR_CONNECTION_REFUSED" in any browsers !

Into the httpd2 log I can read  :

[error] (1) Permission denied: mod_mime_magic: can't read magic file /web/config/magic...

  Moreover the file is not in the repertory !

thanks for your help !

(sorry for my english, I am french !)

[_Val_]

R77.30 is out of support for a long time. It uses very old TLS ciphers, so you need a browser as old as the version to open a WebUI. All current browsers will suggest much stronger HTTPS encryption from the client side which R77.30 cannot handle, hence the "magic" error.

[rrbranco]

If you don't mind sharing...

You did a restore to factory defaults ?

Why do you need R77.30 ?    If you really need R77.30 with the current / active configuration without factory default, then I think that you can try to downloading and running a firefox portable browser dated from years ago (if you trust running old software from wherever you download it)

This HW 4400 appliance end of support happened Jun 2022 and and the latest supported version was R80.40 according to https://www.checkpoint.com/support-services/support-life-cycle-policy/#appliances-support 

Is it possible to try to do a fresh install R81.20 on that and access the webui using current browser versions ?

[the_rock]

I have no clue in the world if this will work, but you can try this trick to open old school iexplore and see if that works to get to web UI. You may also need to check and disable TLS versions as a test, as per below and probably enable ssl ones.

https://www.reddit.com/r/Windows11/comments/vdv9nj/easiest_way_to_open_internet_explorer_on_windows/...

Andy

 

[Tal_Paz-Fridman]

So aside from the need to urgently move to a more current version (like R81.20) please look at the solution suggested in https://support.checkpoint.com/results/sk/sk103397  ( Scenario 8 )

[the_rock]

Valid point, that may help, I hope.

Andy