Firewall-1

Re: [FW-1] SmartCenter is not running

Subject: Re: [FW-1] SmartCenter is not running
From: fwguru <fwguru AT GMAIL DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 21 Sep 2006 14:50:16 -0400
You probably had a corrupted gui_clients file.  Try deleting this file
and re-creating the gui clients file by executing the "cp_conf client
add <ip>"

The file is located in the $FWDIR/conf dir.  Try that next time,
before doing an fwm sic_reset.

HTH,

Neil Delacruz


On 9/15/06, sin <sin AT imacandi DOT net> wrote:
Claudia Cordova wrote:

> sic_client_connected: SIC error - Client could not connect to server
>
> FWM 6475 2002621248]@salcto-apl01[12 Sep 9:14:41] PM_session_init: given
> session
> I(CN=cp_mgmt_salcto-apl10,O=salcto-apl01.grupotaca.com.axx3fs;IP=57.234.146.
> 153,CN=Gui_Client;18190;cpmi). [FWM 6475 2002621248]@salcto-apl01[12 Sep
> 9:14:41] PM_policy_query: input session
> I(CN=cp_mgmt_salcto-apl10,O=salcto-apl01.grupotaca.com.axx3fs;IP=57.234.146.
> 153,CN=Gui_Client;18190;cpmi).
>
>
>
> FWM 6475 2002621248]@salcto-apl01[12 Sep 9:14:41] sicobj_resolve_by_opsec:
> No object found with SIC name 'IP=57.234.146.153,CN=Gui_Client'
>
>
>

>
> I see in the CN another hostname. My Smartcenter is salcto-apl01 and I see "
> CN=cp_mgmt_salcto-apl10" I can't execute SIC reset because I have 300
> Securemote Clients and some VPNs Site-to-Site...
>
>


so far, in situations like this, the only way to get it back up was to
do fwm sic_reset on the management. and then reestablish sic with the
enforcement modules.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>