Karen,
Are you duplicating the IP addresses as well? If so, do you have the
backup on a test network? The FW-1 acts real funny if all the defined
NICs are not up and running.
Just a thought.
Stewart
Stewart Rae
Network Manager
Guthrie Healthcare System
Sayre, PA 18840
(570) 882-5374 (voice)
(570) 882-6874 (fax)
"Erickson, Karen PSC" <Karen.Erickson AT PSC.STATE.WI DOT US>
Sent by: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
05/23/2003 10:17 AM
Please respond to Mailing list for discussion of Firewall-1
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
cc:
Subject: [FW-1] Problems creating NG FP3 backup
We have a Windows 2000 machine with NG FP3 in production and are trying
to create a duplicate backup to put in place in case the other ever goes
down. The gateway and management are on the same machine. I have
rebuilt the backup box 3 times as there are varying ideas about how to
create the backup machine. Each time I was not able to open the Smart
DashBoard-got an error message that the "Connection cannot be
initiated. Make sure the Server <> is up and running". It is.
The backup is a duplicate of the production machine as far as hardware,
name, IP addresses and which NIC they are associated with. So far I have
(1) moved over FW1 directory-didn't work (2) moved over FW1 and CPShared
directories-nope (3) rebuilt (because I have been told once the policy
editor is opened the certificate is created so it must be rebuilt). .
.with virgin copies of the FW1 and CPShared directories saved to
overwrite if necessary (although I do not know if this will make a
difference if once the policy editor is opened it's time to redo the
machine again). Any suggestions? I have been told what I am trying to
do may not be possible because of the certificates that are created in
NG. Thanks.
Karen Erickson
Office of Information Technology
Public Service Commission of Wisconsin
608-266-0038
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|