I have inherited a not quite right management server that continues to think it is also a security gateway. This was discovered after routine patching of the management box lead to loss of communications from both SmartConsole and the two security gateways that send logs to this SMS VM.
Note that this is inside a 'non-production' environment, thus explaining why this has not been noticed earlier.
From poking around, I found that expected traffic was being received by the vNIC, as confirmed by tcpdump and also that outbound pings worked.
After searching for SKs, I found What to do if the Security Management Server was also mistakenly installed as Security Gateway (chec.... Which did not help. But following the instructions in reverse did. However this is not permanent as the issue returns after each reboot of the management server.
I have tried logging a TAC case but that has yielded a best solution of "rebuild the box". While that is an perfect-world answer, it does not scratch the itch I have of "why does the management server all inbound packets when rebooted, after having followed sk38746"?
