I know that state synchronization between different versions of
FW-1 is not supported. However, that does not necessarily mean
that it won't work between very similar versions.
I am going to be upgrading a failover pair from FW-1 NG FP2 to
FW-1 NG AI does anyone know from experience whether these two versions
can state sync? There are long-lived TCP connections over the pair that
it would be nice to not have to break. Enabling fw_allow_out_of_state_tcp
is only a partial fix since we have to see something go from inside
out before it is turned back off.
--
Crist J. Clark crist.clark AT globalstar DOT com
Globalstar Communications (408) 933-4387
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
