Below are reasons why this error is encountered.
Unable to make CPMI connection
SecurePassage.Networking.Ctp.ResponseHasErrorsException: CPMIConnect: Configuration retrieval failed with empty file Empty policy file [./transfer/8c602ca0-1dd2-11b2-8ac4-f4bfaff961e0]
To see if a valid CPMI connection exists for a device on the FireMon data collector run the below command to a checkpoint device to verify CPMI connectivity.
ss -lna | grep 18184 *This command will show established connections on this port
curl -v telnet://x.x.x.x:18190 * This will test the port is open
Data Collector not in gui-clients file
SecurePassage.Networking.Ctp.ResponseHasErrorsException: CPMIConnect: Configuration retrieval failed with empty file Empty policy file [./transfer/aed1e0fc-1dd1-11b2-8ac6-f4bfaff961e0]
In the Check Point smart console or in the Gaia web portal, add the FireMon data collector IP address to the GUI Clients list in User Management. The GUI clients list can also be configured to accept all IP addresses.
When using an R80 MDS, please make sure the FireMon object that is added to the Trusted Clients list has been given permissions to All Domains.
Wrong IP configured in FireMon device settings-
SecurePassage.Networking.Ctp.ResponseHasErrorsException: CPMIConnect: Configuration retrieval failed with empty file Empty policy file [./transfer/12a8069e-1dd2-11b2-8ac8-f4bfaff961e0]
Update the IP address in FireMon device settings in administration.
Wrong Password
SecurePassage.Networking.Ctp.ResponseHasErrorsException: CPMIConnect: ERROR: Unable to bind CPMI connection [-2147024891][General access denied error] CPMIConnect: Configuration retrieval failed with empty file Empty policy file [./transfer/17c5d4da-1dd2-11b2-8ac6-f4bfaff961e0]
Validate the service account password is correct in FireMon device settings. In Smart Console verify that the service account is not locked, and that the account is not configured to change password on next login.
Wrong Username
SecurePassage.Networking.Ctp.ResponseHasErrorsException: CPMIConnect: ERROR: Unable to bind CPMI connection [-2147024891][General access denied error] CPMIConnect: Configuration retrieval failed with empty file Empty policy file [./transfer/474f5e1a-1dd2-11b2-8ac6-f4bfaff961e0]
Validate that service account username is correct and that the account is not locked out.
Comments
0 comments
Article is closed for comments.