Alexander Simbun wrote:
Hi,
In my case, it does not work, even on very similar versions. Even it
works in that way, you might have a difficulties to troubleshoot and will
get a couple of strange problem later. Anyway, it is strongly
recommended to
upgrade both into a same version. FW-1 NG FP2 is the old version compare of
NG AI, Check Point has released and improved much of its features and
functionalities in later version.
Thanks for the data point. I am going to upgrade both. I just would
like as little network disruption as possible during the procedure.
----- Original Message -----
From: "Crist Clark" <crist.clark AT GLOBALSTAR DOT COM>
To: <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
Sent: Friday, November 19, 2004 8:30 AM
Subject: [FW-1] State Sync Between FW-1 Versions
I know that state synchronization between different versions of
FW-1 is not supported. However, that does not necessarily mean
that it won't work between very similar versions.
I am going to be upgrading a failover pair from FW-1 NG FP2 to
FW-1 NG AI does anyone know from experience whether these two versions
can state sync? There are long-lived TCP connections over the pair that
it would be nice to not have to break. Enabling fw_allow_out_of_state_tcp
is only a partial fix since we have to see something go from inside
out before it is turned back off.
--
Crist J. Clark crist.clark AT globalstar DOT com
Globalstar Communications (408) 933-4387
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
--
Crist J. Clark crist.clark AT globalstar DOT com
Globalstar Communications (408) 933-4387
The information contained in this e-mail message is confidential,
intended only for the use of the individual or entity named above.
If the reader of this e-mail is not the intended recipient, or the
employee or agent responsible to deliver it to the intended recipient,
you are hereby notified that any review, dissemination, distribution or
copying of this communication is strictly prohibited. If you have
received this e-mail in error, please contact postmaster AT globalstar DOT com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|