SmartDashboard/Policy Editor does not have too many issues. However, a few problems come up from time to time. Note that the issues described in the following subsections continue the numbering system used in the FAQs in the previous section. 4.10 My Rulebases Have Disappeared!There are times when it appears that all of your rulebases have disappeared. This is because the rulebases.fws file is corrupt. You can simply recreate this file by closing any GUI connected to the management console and performing the following steps:
There are some differences between these commands.
When importing rulebase files, if objects referenced in a specific rulebase no longer exist, the rulebase in question will not be successfully imported. This happens with particularly old rulebases. You will see errors to this effect when you run this command: These errors are normal. 4.11 Using the GUI over Slow LinksIf you are using the GUI over a particularly slow link or have a particularly large number of rulebases or network objects, you may see a lot of Server Not Responding messages when you attempt to use the GUI. The GUI tries to download objects_5_0.C and all the rulebases used. If this takes longer than the timeout value (which is 25 seconds), you will get this message. In FireWall-1 NG, a new "compressed connection" feature was added. By default, the SmartDashboard/Policy Editor application should have this option enabled. However, it's possible it might have been disabled. On the SmartDashboard/Policy Editor logon screen, ensure that the "Use compressed connections" option is enabled. It will be listed if you click on the "More options" link. Although not much can be done for the size of objects_5_0.C , the number of rulebases can certainly be reduced. Remove some unused rulebases. You can also adjust the timeout for the GUI client connection as follows .
4.12 I Cannot Fetch a Host's InterfacesWhen you are editing a workstation object, you may be trying to do a GET to automatically fill in the interfaces on the Interfaces tab. This may fail. You can only fetch the interfaces on a host that has either FireWall-1 installed or SNMP installed. Depending on the object in question and the version of FireWall-1 being used, you will either have to troubleshoot this as a remote management issue (see Chapter 7) or as an SNMP issue. 4.13 SmartMap (or VPE) Crashes When Logging into SmartDashboard/Policy EditorAfter upgrading FireWall-1 4.1 to FireWall-1 NG FP3 (management server), sometimes SmartDashboard crashes after logging in to it. It seems to be the SmartMap that generates this problem. The solution for this problem is to edit the objects file (don't do this manually!) by using dbedit as shown below. c:\> dbedit Enter Server name (ENTER for 'localhost'): <ip management server> Enter User Name: <username> Enter User Password: <pass> Please enter a command, -h for help or -q to quit: dbedit> modify properties firewall_properties totally_disable_VPE true dbedit> update properties firewall_properties firewall_properties updated successfully. dbedit> quit Now when you try to log in to the SmartDashboard, you'll be able to manage your firewall and policy but without the SmartMap. 4.14 FireWall-1 Error: No License for User InterfaceThere are several possible causes for this error:
|