Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  Gateway is disconnected from MX

    Posted 09-08-2022 08:20
    Hello,

    There is a problem with our WAF Gateway. It appears gateway disconnected. We open the ports:

    - GW to MX in 8083, 8085
    - MX to GW in 443

    After that we test the traffic and it is okay.

    (Based on the article: Imperva Documentation Portal)

    Then we try the status of the gw and the status of the mx and is registered and running. I also did a restart for the mx and gw. 

    I don't understand why it still appears disconnected in the management interface. Can someone knows how to fix this problem?


    #WAF #On-PremisesWAF(formerlySecuresphere)​​
    #On-PremisesWAF(formerlySecuresphere)

    ------------------------------
    Olgerta Prendi
    Cyber Security Specialist
    S&T AG
    Tirana
    ------------------------------


  • 2.  RE: Gateway is disconnected from MX

    Posted 09-08-2022 10:07
    Hi Olgerta
    Normally this is a network problem
    You need to validate in the communication with the gateway and the MX is reachable
    You will test with tcpdump in both devices with ports 443 and 8083
    Or if you have a firewall between the devices, validate this communication

    ------------------------------
    Alejandro Hernandez
    Consultant and Trainer
    Soluciones Integrales en Capacitacion SA de CV ("SICAP")
    Mexico D.F
    ------------------------------



  • 3.  RE: Gateway is disconnected from MX

    Posted 09-08-2022 15:41

    Hello Olgerta,

    Thank you for the post, can you please check the gateway status on the cli, ssh to the gateway and run below command,
    #impctl status
    >If it's running and registered, below is the expected result,


    Can you please confirm you are able to telnet from the GW to the MX on port 8083.
    And back on port 443

    From GW to MX:
    telnet <MX-IP> 8083

    From MX to GW:
    telnet <GW-IP> 443

    Ref article,
    https://docs.imperva.com/howto/1d441f7e



    ------------------------------
    Syed Noor Fazal
    Product Support Engineer
    ------------------------------



  • 4.  RE: Gateway is disconnected from MX

    Posted 09-09-2022 09:36
    Edited by Olgerta Prendi 09-09-2022 09:37
    Hello,

    Thank you all for your replies and your availability to help me.

    Everything was in the proper way related to the network side and as I mentioned the gateway and mx were registered and running.

    We solve the problem and it consists on the configurations. It means the IP that is translated to the Imperva must be added.
    At the moment that we add it, the gateway started running.

    I hope this solution helps to anyone who faces it.

    Kind Regards,
    Gerta

    ------------------------------
    Olgerta Prendi
    Cyber Security Specialist
    S&T AG
    Tirana
    ------------------------------



  • 5.  RE: Gateway is disconnected from MX

    Posted 09-12-2022 02:36

    Hi @Olgerta Prendi

    I am delighted you found a solution and thanks for coming back to update community. May I ask if you were able​ to add the IP yourself or did Imperva support help with this? Just to benefit anyone reading this post that may have the same issue.

    Thank you,
    Sarah



    ------------------------------
    Sarah Lamont
    Digital Community Manager
    ------------------------------



  • 6.  RE: Gateway is disconnected from MX

    Posted 09-12-2022 03:26
    Edited by Olgerta Prendi 09-12-2022 03:27

    Hi Sarah,

    The gateway was configured before and it was unregistered. Then, we registered with the same configurations from the beginning and we figured out that we didn't add the IP. 

    Regards,
    Gerta






    ------------------------------
    Olgerta Prendi
    Cyber Security Specialist
    S&T AG
    Tirana
    ------------------------------



  • 7.  RE: Gateway is disconnected from MX

    Posted 09-12-2022 04:02
    That makes sense. Thanks, Olgerta!

    ------------------------------
    Sarah Lamont
    Digital Community Manager
    ------------------------------