Watchtower stopped working on r77.20.87

[firebird]

Hi a few weeks back after years of no issues the watchtower stopped working.  First started that notification where not coming to the phone, thereafter trying to login to the firewall via the app said gateway unreadable error.    I cannot even pair a new device as it never provides the QR code and looks to be a backend issue on checkpoint cloud infra.   Again very specific to r77.20.88 builds.  

I know it’s EOL but no reason for this to stop working.   Have TAC ticket for weeks with no resolution.  

curios to know if others with the same firmware have the issue? 

[the_rock]

Lets see if someone here can help. I assume TAC might be unable to assist much sadly in this situation, since version is not officially supported.

Andy

[firebird]

Thanks Andy at the time of reporting prior to Oct 2024 EOL for r77.20.87 it was reported so no reason for this not to be looked at.  The watchtower works if I use the browser to get access to GUI.  What has stopped working is the WatchTower app and pairing and in doing debug you can see the firewall goes out, but CP never responds back so to me it looks like it's being blocked by CP end.   CP has also stated many others have had this issue and was resolved with a reboot.  Unfortunately not for me.   

I was also given a private build B163 upon request if there was a newer one outside of B160 released to address the zero day VPN.   B163 fixes SFWD crashes believe specific to certs and added some features for radius ported from R81.  However, don't believe this is a firmware issue so never updated and seeking if anyone else installed B163 those that are still on this device. 

Any support is always appreciated still waiting for TAC/R&D to come out officially to state something.  If it's been discontinued to use, am fine.  I was simply using the app portion to see new devices connecting to my network.  

[the_rock]

Ok, if thats the case, then hopefully TAC can dig into it further. I hope @G_W_Albrecht can assist, as he is the SMB guru 🙂

Andy

[firebird]

Thanks Andy, that would be great if @G_W_Albrecht  can assist and glad to provide any of the private build as well.  

[the_rock]

Im sure he will when he sees the post. Have a great weekend!

Andy

[G_W_Albrecht · Accepted solution]

Yes,this is not possible anymore - had it also working  for years, but last (or before last) iOS app build stopped that. How did you get TAC working on this EOL device - is there a valid support contract ?

[the_rock]

I believe @firebird indicated case was opened before it became EOL.

Andy

[G_W_Albrecht]

End of Support was this October, so the change is in time.

[the_rock]

Im thinking the TAC ticket was probably created before then, thats what I meant.

[firebird]

morning all, correct ticket was open prior to EOL.  Regardless of EOL or support contract.   WatchTower is not bound to licensing or any blades.   Firewall license is never to expire.    My question remains what has changed on Checkpoint end on the cloud Infra or app to prevent the WatchTower app to work?  If this is by design to stop working for the R77.20.87.X that's fine.   Also to note that what continues to work if you have the reach my device service is connecting to the GUI remotely. 

Also seeking to know if anyone has tried the R77.20.87 Build 163 

[the_rock]

I would hope TAC can confirm that for you?

Andy

[firebird]

me too so far it's been a few weeks now.  This has been ongoing since early Sept that it stopped to work.

[the_rock]

Personally, if I were you, I would email your local SE and ask them if they can try push this issue further to get an official confirmation.

Just my honest advice.

Andy

[firebird]

Thanks Andy, will do. 

[the_rock]

Of course. Just make sure to email them the case number, politely explain the situation and Im POSITIVE they will do their best to help. I did that few times before and it always had good outcome.

Andy