It might be that the Policy Server isn't running. If that's the case you should
be able to manually start it. cprestart should also start it but you don't want
to have to do that on a production firewall if you don't have to.
Bill
-----Original Message-----
From: dogbert [mailto:dogbert AT INFINITO DOT IT]
Sent: Wednesday, October 06, 2004 4:41 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] Secureclient failed to update Site but can connect to
firewall
After an unexpected shutdown of our systems last sunday we are
experiencing some problems with our securemote/secureclient remote hosts.
All these host cannot perform a Policy Update and keep returning the error:
Gateway not responding
Connection Failed.
But they can still connect to the gateway and use our internal resources
if they ignore the error and try to connect without perform a Site Update.
Obviously freshly installed client cannot connect at all beacuse the
can't download the policy.
The problem presented itself after a shutdown of all our system due to a
prolungated black-out. We had to run fsck for all of our firewalls and
management.
We are running Checkpoint NG AI R55 on Solaris 2.8 on a distribute
environment with an Enterprise Management and a VPN cluster with
Stonebeat Fullcluster.
We are using Ceckpoint secureclient NG R54, R55 and R56 versions and all
of these present the same problems.
Do you have any ideas of what I can check ?
Thanks,
Riccardo
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
Please note that:
1. This e-mail may constitute privileged information. If you are not the
intended recipient, you have received this confidential email and any
attachments transmitted with it in error and you must not disclose, copy,
circulate or in any other way use or rely on this information.
2. E-mails to and from the company are monitored for operational reasons and in
accordance with lawful business practices.
3. The contents of this email are those of the individual and do not
necessarily represent the views of the company.
4. The company does not conclude contracts by email and all negotiations are
subject to contract.
5. The company accepts no responsibility once an e-mail and any attachments is
sent.
http://www.integralis.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
