Who rated this post

Hi:

Today we realized the SIC certificate expired in 4 out of 3 gateways. In this SK you can read this certificates should be renewed automatically at the 75% threshold (Scenario 4) (https://support.checkpoint.com/results/sk/sk97691). The first thing we thought is the ports were closed but it doesn't seem so. Telnets from SMS to one gateway:

[Expert@SMS:0]# telnet 192.168.217.81 18191
Trying 192.168.217.81...
Connected to 192.168.217.81.
Escape character is '^]'.

[Expert@SMS:0]# telnet 192.168.217.81 18192
Trying 192.168.217.81...
Connected to 192.168.217.81.
Escape character is '^]'.

There is no connection to the 18210 and 18211 ports because the gateways are not listening on them:

[Expert@Gateway]# netstat -punta | grep 1821
[Expert@Gateway]#

SMS is R81.20 Take 41, gateways in R81.10 Take 130.

We'll reset the SIC manually but want to know why the SIC certificates weren't renewed automatically.

P.D. In Global properties > Firewall, Accept control connections option is enabled.

Any ideas?

Thanks in advanced

Regards