CPD is running?

[humayun]

Please explain to me the following error message? I get this when trying to establish a SIC?

Check that CPD is running on "newNokiafirewall" and that TCP connectivity is allowed from SmartCenter server to IP "X.X.X.X, Port 18191 **

Thanks.

[ddarby1]

The Smart Center Server cannot contact the Enforcement Module in order to manage it.

Either the Check Point Daemon (CPD) is not running on the enforcement module and/or communications are being blocked between the Smart Center server and the enforcement module on the IP address you specified, TCP Port 18191.

[kva.kva]

If you add new checkpoint object, that lies on the other side of you Enforcement module and SC:

1'st add checkpoint object and install policy
2'nd try to establish SIC

[humayun]

SIC Status for "XYZ": Unknown
Could not establish TCP connection with "IP Address"
** Check that CPD is running on "XYZ" and that TCP connectivity is allowed from SmartCenter server to "IP Address", Port 18191 **

I ran out of all options on what things I knew how to do.

I ran cpconfig on the firewall and established the SIC and rebooted. After that I am not able to ping it or connect via PUTTY. I can however access it from the console and CPD is up.

I added it in my Dashboard as an object and still cannot establish SIC. I installed the policy is also but of course, cannot do that on my new firewall since SIC is not established.

I really don't know what to do here, more help please.
Many thanks.

[chillyjim]

Try an "fw unloadlocal" at the gateway and see if life is better then. I know it shouldn't be required but I have had it work and let me push policy.

[humayun]

Where should I run this? You mentioned gateway, that means my firewall management server? I have many other firewalls in the company's other US location would this command affect anything on those firewalls?

Thanks.

[intehnet]

no, run it on the firewall in question
then run fwm unloadlocal on the management also

ping from management to firewall, check your arp cache, is the mac address of the firewall there? if not, then check your layer 1!!