Support Center > Search Results > SecureKnowledge Details
Global SmartLog R77.30 does not show logs from remote Multi-Domain Server
Symptoms
  • SmartLog GUI client connected to the Multi-Domain Server (global database) does not show logs from the remote Multi-Domain Server or Multi-Domain Log Server in the following environments:

    • At least two R77.30 Multi-Domain Servers (regardless whether they are configured in Management HA or not)
    • R77.30 Multi-Domain Server with R77.30 Multi-Domain Log Server


  • After upgrade to R77.30, when accessing global SmartLog on R77.30 MDS, all Log servers are shown, but CLMs mounted on a separate MLM are shown as disconnected.

  • The smartlog_server.elg file shows:

    CpmiConnections::OnEnd CPMI communication failure with (SIC Error for cpmi: Client could not choose an authentication method for service cpmi)
Cause

SmartLog authentication with the remote server is refused.


Solution

Check Point offers a hotfix for this issue for R77.30 Multi-Domain Server (issue does not occur on other versions).

Hotfix has to be installed on the Multi-Domain Server, to which the SmartLog GUI client connects.

The hotfix is included in:

 

Hotfix for R77.30 GA is available directly from this article:

  • Instructions for Gaia OS using CPUSE (Check Point Update Service Engine)
    • Online installation

      1. Connect to the Gaia Portal on your Check Point machine and navigate to Upgrades (CPUSE) pane - click on Status and Actions.
      2. In the upper right corner, click on the Add hotfixes from the cloud button:
      3. Paste the following CPUSE Identifier and start the search: Check_Point_Hotfix_R77.30_sk106600.tgz
      4. When the package is found, click on the link to add the package to the list of available packages.
      5. Select the hotfix package R77.30 Hotfix for sk106600 (Global SmartLog does not show logs from remote Multi-Domain Server) - click on Install Update button on the toolbar.
      6. Reboot the machine.

      For detailed instructions, refer to sk92449: CPUSE - Gaia Software Updates (including Gaia Software Updates Agent) - section "(4) How to work with CPUSE".

    • Offline installation

      Version Gaia - CPUSE Offline
      R77.30 (TGZ)
      1. Download the Gaia CPUSE Offline package from the table above.
      2. Connect to the Gaia Portal on your Check Point machine and navigate to Upgrades (CPUSE) pane - click on Status and Actions.
      3. On the toolbar, click on the More button - select Import Package - browse for the CPUSE Offline package (TGZ file) - click on Upload.
      4. Select the hotfix package R77.30 Hotfix for sk106600 (Global SmartLog does not show logs from remote Multi-Domain Server) - click on Install Update button on the toolbar.
      5. Reboot the machine.

      For detailed instructions, refer to sk92449: CPUSE - Gaia Software Updates (including Gaia Software Updates Agent) - section "(4) How to work with CPUSE".

    Notes:

    • Hotfix has to be installed on the Multi-Domain Server, to which the SmartLog GUI client connects.
    • Make sure to take a snapshot of your Check Point machine before installing this hotfix.
    • In Management HA environment, this procedure must be performed on both Management Servers.


  • Instructions for Gaia OS, SecurePlatform OS and Linux OS (legacy installation in Command Line)
    Version Gaia - Legacy CLI,
    SecurePlatform,
    Linux
    R77.30 (TGZ)

    Follow these steps:

    1. Download the hotfix package from the table above, transfer the hotfix package to the machine and unpack it:
      [Expert@HostName]# tar -zxvf Check_Point_Hotfix_R77.30_Linux_sk106600.tgz
    2. Install the hotfix:
      [Expert@HostName]# ./indexer_HOTFIX_GEYSER_HF_BASE_142_<BUILD>
      Note: The script will stop all of Check Point services ('cpstop') - read the output on the screen.
    3. Reboot the machine.

    Notes:

    • Hotfix has to be installed on the Multi-Domain Server, to which the SmartLog GUI client connects.
    • Make sure to take a snapshot of your Check Point machine before installing this hotfix (on Gaia / SecurePlatform OS).
    • In Management HA environment, this procedure must be performed on both Management Servers.

 


 

Related solutions:

Applies To:
  • 01702895 , 01703025

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment