156-215.80 · Question #238
Which of the below is the MOST correct process to reset SIC from SmartDashboard?
The correct answer is B. Click the Communication button for the firewall object, then click Reset. Run cpconfig on the. Resetting SIC requires a coordinated two-step process - clearing the trust from SmartDashboard and then reinitializing the one-time password on the gateway itself via cpconfig.
Question
Which of the below is the MOST correct process to reset SIC from SmartDashboard?
Options
- ARun cpconfig, and click Reset.
- BClick the Communication button for the firewall object, then click Reset. Run cpconfig on the
- CRun cpconfig, and select Secure Internal Communication > Change One Time Password.
- DClick Communication > Reset on the Gateway object, and type a new activation key.
How the community answered
(43 responses)- A5% (2)
- B77% (33)
- C12% (5)
- D7% (3)
Why each option
Resetting SIC requires a coordinated two-step process - clearing the trust from SmartDashboard and then reinitializing the one-time password on the gateway itself via cpconfig.
Running cpconfig alone only addresses the gateway side of SIC; without first resetting from SmartDashboard, the management server retains the old SIC certificate and the two sides cannot re-establish trust.
Clicking the Communication button on the gateway object in SmartDashboard and selecting Reset clears the established SIC certificate on the management side. Running cpconfig on the gateway and setting a new one-time password then reinitializes the SIC trust from the gateway side, completing the full reset cycle so both ends can re-establish communication.
Using cpconfig to change the one-time password modifies only the gateway-side credential and does not clear the established SIC certificate on the management server side.
Clicking Communication > Reset in SmartDashboard resets only the management-side trust; without also running cpconfig on the gateway to set a matching activation key, SIC cannot be re-established.
Concept tested: Check Point Secure Internal Communication SIC reset two-step procedure
Source: https://support.checkpoint.com/results/sk/sk65764
Topics
Community Discussion
No community discussion yet for this question.