establishing a SIC

[humayun]

I am bulliding a new Nokia IP710 with Checkpoint NGX (R60) and I want to bring it online but I need to know how do you establish a sic?

The error I get is that a SIC is not established.
Thanks.

[Youngy]

This CP solution may help:

Solution ID: #skI2688

and also there is a general SIC troubleshooting guide here:

Solution ID: #sk16345

Hope that helps

[humayun]

I dont have access to the CP knowledge base.

Can you post it in here?

[Sergej]

Nokia knowledge base have almost all Checkpoint knowledge base articles. Nokia knowledge base are accessible to all registred Nokia users. Articles are well structured (i like nokia formatting more than checkpoint) and all requires same access level - registered user. Try to find the same articles in Nokia knowledge base.
P.S. I hate Checkpoint knowledge base "not enough permissions" articles.

[humayun]

Can someone help me with this error below and direct me to the correct course of action to fix it.

SIC Status for lexfw02: Not Communicating
Peer does not have a certificate for SIC [error no. 111]
** Try to re-establish the trust **

Thanks.

[Westy]

On the Enforcement module. Run cpconfig, and look for the option labeled Secure Internal Communications and reset SIC. On the management module, open SmartDashboard, right click on the Gateway object, edit, click on the Communications button, and try to establish the trust relationship between the two entities. Make sure the routing is setup correctly and that you can ping between the two. You may have to run fw unloadlocal on the enforcement module in order to ping between the two.

[Youngy]

I'll send what I can find to you via pm when I get a chance