- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
What to check when Login to Unit (LTU) is not working from GMS?
07/29/2021 
0 People found this article helpful
32,185 Views
Description
In this article, we explained the things to check when the LTU (Login to Unit) is not working from GMS.
Resolution
Please refer to the network diagram for a typical GMS setup.
Required GMS Version: GMS 9.3 (Build: 9316.1261) with Service Pack 1
GMS Gateway Firewall Requirements:
For the Login to Unit (LTU) to work from the Internet make sure the following two changes are made in the GMS gateway firewall from the Internet.
- Make sure TCP port 8585 is forwarded to GMS All-in-One PC (AIOP) from GMS gateway firewall.
- Also, check the outbound HTTPS management port of the respective firewall is allowed from the GMS AIOP server in the GMS gateway firewall.
Requirements in the Remote Firewall to which we login:
- Make sure to allow the Firewall's HTTPS management traffic from the public IP of GMS AIOP server (if the device is acquired on WAN IP) or private IP of GMS AIOP server (if the firewall is acquired on site to site VPN).
Other Suggestions:
- Please check whether the GMS is using a custom cert or default cert. It's a good idea to check LTU using the GMS default cert.
- If GMS Certificate or GMS management port has been changed try to reboot GMS before checking LTU.
How to check firewall access directly from GMS:
>> Windows: Just open the Web browser from the GMS server and try to login to the remote firewall with its management port then check if we can get the firewall login page.
>> Virtual Appliance (ESXi):
Login into GMS via SSH and try with wget command to see we get a 200 OK response code.
EXAMPLE: GMS server IP which we used in the below command is 10.67.59.41. Please change your correct GMS server IP instead of 10.67.59.41.
Command: wget https://10.67.59.41:8443 --no-check-certificate
NOTE: If your firewall is using a custom certificate then please remove --no-check-certificate from the above command.
Related Articles
- Can we make changes to a firewall config acquired on NSM directly through the firewall?
- Perform Restart of firewall from NSM.
- Requirement is to push cfs settings from one firewall to a group of Firewalls in NSM.
YES
NO