URLF and APCL are not responding

[KM1895]

hi,

I have been working on a problem for a couple of days, and havent found any solution for this so far.

In Smartconsole, a cluster is listed with 

'URL Filtering' is not responding. Verify that 'URL Filtering' is installed on the gateway. If 'URL Filtering' should not be installed verify that it is not selected in the Products List of the gateway (SmartDashboard > Security Gateway > General Properties > Software Blades List).

'Application Control' is not responding. Verify that 'Application Control' is installed on the gateway. If 'Application Control' should not be installed verify that it is not selected in the Products List of the gateway (SmartDashboard > Security Gateway > General Properties > Software Blades List).

I tried disabling the blades, installed policy, enabled them again and pushed policy. But the errors are still there.

It appears to be a cosmetic issue, as tests verify that the app/urlf layer is inspecting and blocking traffic correctly, but would like to get this message removed.

This is on a R80.30 cluster and a R80.40 mgmt server.

Does anyone have any input on this?

[G_W_Albrecht · Accepted solution]

sk111944 suggests checking $FWDIR/appi/update/appi_status.C and cprestart.

[KM1895]

hi,

Yeah, i did the cpstop;cpstart on the standby node, as a test...the article stated it was valid up until 77.30, but thought it was worth a try. found some other issues as well, so ended up rebooting the cluster.

[I_Santos]

So, this procedure worked for you?

[Hasnain_Ansari]

Hi G_W_Albrecht,
We have maestro setup and we are facing the same issue.
Can we perform the same SK111944 ?

Please suggest.
R81.10 - JHF Take66 (Active/active but NOT VSX)

Regards;
Hasnain Ansari

[RobertSmeikal]

I had this exact issue as describe in sk111944 on the standby member of a R80.40 cluster on a 5100 and solved it by reboot (not the cpstop/cpstart procedure). However, it took the gateway unusually long to finish, about 6-7 minutes (normally 3 minutes).