firewall-wizards Digest, Vol 16, Issue 8

Send firewall-wizards mailing list submissions to
firewall-wizards@listserv.icsalabs.com

To subscribe or unsubscribe via the World Wide Web, visit
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
or, via email, send a message with subject or body 'help' to
firewall-wizards-request@listserv.icsalabs.com

You can reach the person managing the list at
firewall-wizards-owner@listserv.icsalabs.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of firewall-wizards digest..."

Today's Topics:

1. Re: Check Point NG FP3 HF2 on Solaris 5.8 (Robert Fenech)

----------------------------------------------------------------------

Message: 1
Date: Wed, 22 Aug 2007 20:43:44 +0200
From: "Robert Fenech" <robertfenech@gmail.com>
Subject: Re: [fw-wiz] Check Point NG FP3 HF2 on Solaris 5.8
To: "Firewall Wizards Security Mailing List"
<firewall-wizards@listserv.icsalabs.com>
Message-ID:
<ee7b3f4e0708221143u18e4d649j28b90130566cece3@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

Hi there.

Thanks so much for your help. No...everything is (well was) in place.
Something got corrupted.

What I did was take an export (use upgrade_export) reinstall Solaris 5.8 and
import the Check Point configuration back.

Everything is working fine now.

Once again thank you.

On 8/22/07, Behm, Jeffrey L. <BehmJL@bv.com> wrote:
>
> To the OP: Did you happen to (oops!) put in a rule that stops the
> management server from talking to the managed firewall? (or accidentally
> take out one that allows it?)
>
> ------------------------------
> *From:* firewall-wizards-bounces@listserv.cybertrust.com [mailto:
> firewall-wizards-bounces@listserv.cybertrust.com] *On Behalf Of *Robert D.
> Hughes
> *Sent:* Thursday, August 02, 2007 2:22 AM
> *To:* Firewall Wizards Security Mailing List; Firewall Wizards Security
> Mailing List
> *Subject:* Re: [fw-wiz] Check Point NG FP3 HF2 on Solaris 5.8
>
>
>
> Disclaimer: sorry for the top post, I'm stuck in OWA right now...
>
>
> FWD won't help with the policy install. In NG, FWM on the manager talks to
> CPD on the firewall. FWD was only used pre-NG for policy installs. Debug
> those two process to find out what's happening. You might also try:
>
> fw fetch <manager>
>
> and see if that tells you anything useful.
>
> Regards,
> Rob
>
>
> -----Original Message-----
> From: firewall-wizards-bounces@listserv.icsalabs.com on behalf of Robby
> Cauwerts
> Sent: Wed 8/1/2007 6:00 PM
> To: Firewall Wizards Security Mailing List
> Subject: Re: [fw-wiz] Check Point NG FP3 HF2 on Solaris 5.8
>
> On 7/20/07, Robert Fenech <robertfenech@gmail.com> wrote:
> >
> > Hi,
> >
> > I am encountering a problem when it comes to install a policy on an NG
> FP3
> > HF2 firewall running on an old Solaris 5.8 machine.
> >
> > Primarily when the policy is about to be installed I get the message
> > "Failed to install policy. Please make sure that Firewall-1 services
> are
> > running...".
> >
> >
>
> Try a cprestart or cpstop/cpstart on the fw module ( be aware of the
> impact
> on your traffic/remote mgmt of the fw!).
> And then try to push the policy again a few times.
>
> If this doesn't solve the problem try to debug cpd and fwd (check CP
> knowledgebase or post a reply).
>
> Br.
> Robby
>
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards@listserv.icsalabs.com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://listserv.icsalabs.com/pipermail/firewall-wizards/attachments/20070822/de3fadd0/attachment-0001.html

------------------------------

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

End of firewall-wizards Digest, Vol 16, Issue 8
***********************************************