The Nokia release notes for NG AI R55 state in red letters that IPSO 3.7.1
is not supported with R55. You have to use IPSO 3.7 build 32. I would
suspect this limitation also applies to R54 since it pre-dated 3.7.1
Prior to the release of R55 I put in a Nokia support call on this issue and
was told that I could use 3.7.1 or 3.7 build 32 with R54, but this was right
after 3.7.1 was released. I didn't have time to install 3.7.1 and then R55
was released with the above referenced note.
I've never tried installing a new, lower rev of IPSO but it looks like that
might be the problem. Better call Nokia and ask them.
Ray Pesek, CISSP
From: Luque Quiroga Federico <fluquequi AT SERVEXTERNOS.GRUPOSANTANDER DOT COM>
Reply-To: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1]
Date: Fri, 30 Jan 2004 12:22:28 +0100
Hi,
We had the following configuration:
Two Nokia IP380 boxes with VRRP, IPSO 3.7.1 and NG AI R54 and the
management on Windows 2000 Server with NG AI R54. We had to enter
CPCONFIG and activate the "Enable Checkpoint Cluster XL and State
Synchronization" and the "Would you like to enable the High Availabilty
module" options and the firewall and VPN worked fine.
The problem begun when we upgrade the Checkpoint to NG AI R55 on both
Nokia IP 380 boxes and the management. The VPN stop responding and we got
an "Error Communicating with Gateway" message on all VPN clients. The
firewall functions kept working fine. If we turn off one of the Nokia
IP380 boxes the VPN starts working again.
Thanks in advance,
Regards,
Federico
******************AVISO LEGAL******************
Este mensaje es privado y confidencial y solamente para la persona a la
que va dirigido. Si usted ha recibido este mensaje por error, no debe
revelar, copiar, distribuir o usarlo en ningun sentido. Le rogamos lo
comunique al remitente y borre dicho mensaje y cualquier documento
adjunto que pudiera contener. No hay renuncia a la confidencialidad ni a
ningun privilegio por causa de transmision erronea o mal funcionamiento.
Cualquier opinion expresada en este mensaje pertenece unicamente al autor
remitente, y no representa necesariamente la opinion de Santander Central
Hispano, a no ser que expresamente se diga y el remitente este autorizado
para hacerlo.
Los correos electronicos no son seguros, no garantizan la
confidencialidad ni la correcta recepcion de los mismos, dado que pueden
ser interceptados, manipulados, destruidos, llegar con demora,
incompletos, o con virus. Santander Central Hispano no se hace
responsable de las alteraciones que pudieran hacerse al mensaje una vez
enviado.
Este mensaje solo tiene una finalidad de informacion, y no debe
interpretarse como una oferta de venta o de compra de valores ni de
instrumentos financieros relacionados. En el caso de que el destinatario
de este mensaje no consintiera la utilizacion del correo electronico via
Internet, rogamos lo ponga en nuestro conocimiento.
******************DISCLAIMER******************
This message is private and confidential and it is intended exclusively
for the addressee. If you receive this message by mistake, you should not
disseminate, distribute or copy this e-mail. Please inform the sender and
delete the message and attachments from your system. No confidentiality
nor any privilege regarding the information is waived or lost by any
mistransmission or malfunction.
Any views or opinions contained in this message are solely those of the
author, and do not necessarily represent those of Santander Central
Hispano, unless otherwise specifically stated and the sender is
authorised to do so.
E-mail transmission cannot be guaranteed to be secure, confidential, or
error-free, as information could be intercepted, corrupted, lost,
destroyed, arrive late, incomplete, or contain viruses. Santander Central
Hispano does not accept responsibility for any changes in the contents of
this message after it has been sent.
This message is provided for informational purposes and should not be
construed as a solicitation or offer to buy or sell any securities or
related financial instruments. If the addressee of this message does not
consent to the use of internet e-mail, please communicate it to us.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
_________________________________________________________________
Let the new MSN Premium Internet Software make the most of your high-speed
experience. http://join.msn.com/?pgmarket=en-us&page=byoa/prem&ST=1
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
