I don't think this will work. I know when I went from NG FP3 to NGAI I was
told it wouldn't state sync once the versions differed. Note: I did not
test it. I just upgraded one of the boxes, and then load balanced to it,
let it run that way for a few days, and then took down the other one and
upgraded it.
Derek O'Flynn
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Crist
Clark
Sent: Thursday, November 18, 2004 6:30 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] State Sync Between FW-1 Versions
I know that state synchronization between different versions of
FW-1 is not supported. However, that does not necessarily mean
that it won't work between very similar versions.
I am going to be upgrading a failover pair from FW-1 NG FP2 to
FW-1 NG AI does anyone know from experience whether these two versions
can state sync? There are long-lived TCP connections over the pair that
it would be nice to not have to break. Enabling fw_allow_out_of_state_tcp
is only a partial fix since we have to see something go from inside
out before it is turned back off.
--
Crist J. Clark crist.clark AT globalstar DOT com
Globalstar Communications (408) 933-4387
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
