CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Installing And Upgrading
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-07-18
Junior Member
 
Join Date: 2006-07-18
Posts: 17
Rep Power: 0
Clon32 has an average reputation (10+)
Default SIC failure

Hi Guys,

I am trying to push a policy to a ip330 node, SIC was initailized and communicating, However the policy push failed with the following error
Reason: Internal SSL authentication SSL error [ Unknown ].

Any ideas/suggestions would be very much appreciated
Reply With Quote
  #2 (permalink)  
Old 2006-07-18
Senior Member
 
Join Date: 2006-01-25
Posts: 895
Rep Power: 3
melipla has an average reputation (10+)
Default Re: SIC failure

Ensure that time is synced on management and firewall.
Reply With Quote
  #3 (permalink)  
Old 2006-07-19
Junior Member
 
Join Date: 2006-07-12
Posts: 4
Rep Power: 0
rossbird has an average reputation (10+)
Default Re: SIC failure

Thx for the info. Helped me with my issue as well.
Reply With Quote
  #4 (permalink)  
Old 2006-07-26
Junior Member
 
Join Date: 2006-04-19
Location: London
Posts: 5
Rep Power: 0
hodgsonk has an average reputation (10+)
Send a message via MSN to hodgsonk
Default Re: SIC failure

Hi

I have the same problem, except that SIC does not seem establish properly. I get "ckpssl timeout" while trying to establish SIC. The time and date are set correctly on both module and management.

Any ideas?
Reply With Quote
  #5 (permalink)  
Old 2006-07-26
Junior Member
 
Join Date: 2006-04-19
Location: London
Posts: 5
Rep Power: 0
hodgsonk has an average reputation (10+)
Send a message via MSN to hodgsonk
Default Re: SIC failure

Update...

Ping response time between the SmartCenter server and the module is between 2000 and 3000 ms. Could this be the problem?
Reply With Quote
  #6 (permalink)  
Old 2006-07-26
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,660
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: SIC failure

In a word YES! 2-3 seconds latancy I'm sure is outside the window.

Why is it so long?
Reply With Quote
  #7 (permalink)  
Old 2006-07-26
Junior Member
 
Join Date: 2006-04-19
Location: London
Posts: 5
Rep Power: 0
hodgsonk has an average reputation (10+)
Send a message via MSN to hodgsonk
Default Re: SIC failure

SmartCenter is in South Africa, module is in Hong Kong.

Even when I waited for a quiet time, when the response time drops to below 400ms, it still failed.

Oddly enough though, it seems the problem may have been with the module itself, the people onsite powered it off and on this morning, and now everything works fine.
Reply With Quote
  #8 (permalink)  
Old 2006-07-28
Senior Member
 
Join Date: 2006-05-24
Location: India
Posts: 151
Rep Power: 3
vijayant has an average reputation (10+)
Default CA Daemon not running

when i doubble click the smart center server icon in dashboard I get this.

unable to contact ca on the management station, pl make sure ca daemon is running

in smart server > general properties> Communication DN is blank and disabled.

I am using R55 15 days trial version on win server 2003, Enforcement module and Smart server installed on the same machine.

Please guide me ...
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 12:42.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0