Secondary firewall shows unknown status in SmartView Status

[pop_alex]

Dear Techie,

I have a problem recently regarding our firewall cluster. The secondary firewall's status showed "unknown" in SmartView Status. I had taken down the secondary firewall for more than a month. No changes been made on the secondary firewall in terms of system settings and so on. By right, when it boot up, all the latest policies are automatically retrieves from the management server. Yes, I did made some changes on policies recently, but only related to the service but not to the firewall cluster itself. The primary firewall currently is the only one 'alive' in the cluster and the only machine receives the latest policies, when secondary firewall is temporarily offline. I'm not sure how to solve this problem at this moment. Kindly assist me on this matter. Thanks.

Peace & regards,

Alex

[ursule15]

Hello,

I've got exactly the same behavior.

All seem to be OK in the secondary one (conf is 2 Nokia, VRRP actif passive).
State table is well synchronized.

I'm pretty sure that it is just an informative issue, and if my primary fails, my secondary is OK to run well, but... who knows.

Any idea ?

[northlandboy]

Try testing SIC, if that fails, reset it. It's only a 10-minute job if this node is a secondary.

[samwilliam]

Hello

I got exactly the same problem, my secondary firewall is in unknown status

I try to reset both firewall's SIC thats works fine but didn't resolve the problem.

Anyone got a real solution or is it a display bug message ?

Thanks

William

[northlandboy]

After resetting SIC on the secondary, can you successfully test SIC?

[samwilliam]

The sic works fine on both firewall

[northlandboy]

In that case I'd log a call with Check Point - it should not be displaying Unknown, if CPD connectivity and SIC test out OK.

They'll muck around, and what a cpinfo from modules and management, and CPD debug, and then maybe eventually they'll be able to tell you what's wrong.