Heartbeat Unavailable in WSM
I've got a bunch of fireboxes managed in basic mode in our management server. I have 'enable device health monitoring' enabled. So, some of these fireboxes don't like to contact the server, and they show as Heartbeat (unavailable). They're not down, i can still open FSM/Policy manger, but they consistently don't check in. Anyone else ever run into this? I've got 200 boxes connected to server, currently there's about 15 of them that i have to manually expire the lease to get them to show as available.
Best Answer
-
james.carson Moderator, WatchGuard Representative
Expiring the lease makes the mgmt server reach out to the firewall and effectively poke it, and asks it to check in. May mean that the firewall has incorrect setting (wrong IP, etc) for the mgmt server, or something else.
-On the firewall that isn't checking in, search the traffic monitor logs for "dvcp" -- any errors there might shed some light on what the problem is.
-Make sure that the firewall has the correct management server IP in Setup -> Managed Device Settings.
-Make sure that the firewall in front of the management server is allowing the external traffic into the management server. Many admins will change the policy from any-external to a list of their managed firewalls -- this might need to be updated if you've done that.
If you keep running into the issue, opening a support ticket would probably be the next step to fixing it.
-James Carson
WatchGuard Customer Support5
Answers
If you keep running into the issue, I'd suggest opening a case. The support team can get a bit more in depth with logs and try and track down the issue.
-James Carson
WatchGuard Customer Support