| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| We upgraded our SPLat management station and our two clustered (VRRP) Nokias from R60 HFA04 to R62. Now, we can't do https to our management station. I tried "webui enable 443" and it looked successful, but I still get "Page cannot be displayed". I also see FW1_lea from our external logging device to the management station but no data is being retrieved. Any ideas what the problem could be or where I can look? We can open SmartDashboard/SmartView Tracker but can't https, so it isn't a connectivity issue. Also, from our logging device we can ping and traceroute to the management station. Thanks for your help/advice. |
| |||
| This problem is resolved. The management station originally had one default gateway pointing to the primary Nokia firewall. During the upgrade, the primary was down and the secondary was up on the new release. We couldn't access the management station in this scenario, so the vendor doing the upgrade added a second default gateway pointing to the secondary Nokia. This worked fine until the primary Nokia was upgraded and brought back online. I'm guessing we had an asymmetric routing issue where we'd connect through the primary Nokia to the mgt stn, but the mgt stn would try to route back through the secondary Nokia. When the vendor removed the second default gw, everything worked again. |
![]() |
| Thread Tools | |
| Display Modes | |
| |