A good approach will be comparing the compilation time vs. policy push.
You may push either compiled or raw policy file from the command prompt (pf , W)
Using -d (debug) with the fwm load command will tell you what is wrong.
fyi,
-yinal ozkan
--- James A Bowman <James.Bowman AT YESBANK DOT COM> wrote:
> Does anyone have detail on the sequence of events during a policy push
> from an RR55 management
> station to RR54 enforcement point(s)?
>
> (Down to the packet level and based on clusters if possible)
>
> A sample scrubbed tcp dump would help too...
>
> We're troubleshooting issues pushing policies where timeouts are received,
> but policies
> appear to be pushing fine.
>
> We believe we're seeing a 15s timeout issue, but need a good push and
> typical behavior
> to compare against.
>
> I believe the detail will also be based on push settings. We install
> independently
> on each of two clusters and don't install at all if the process fails.
>
> Thanks.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
