We went for 3.8.1 because we wanted link aggregation (new feature in
3.8.1)
We ran into a bug on the high end platforms for which the fix will be
included in 3.9
R.
On Thu, 2005-06-09 at 21:01 -0400, Dong Lin wrote:
> That really answered my question. Thanks Stich and Ray.
>
> I am weighting whether to use 3.8 or 3.8.1. I got a very strang thing with
> 3.8.1. After installed R55 for 3.8, VRRP got screwed up. All interfaces of
> both members of HA pair are in standby state. If I removed R55, than VRRP is
> normal again. If I use 3.8, then VRRP is fine after installed the same R55.
> Anyone else has this experience ?
>
>
> ----- Original Message -----
> From: "Ray" <sixsigma44 AT HOTMAIL DOT COM>
> To: <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
> Sent: Thursday, June 09, 2005 7:36 PM
> Subject: Re: [FW-1] IPSO code explaination
>
>
> >I concur with your explanation. When 3.7.1 came out, I queried Nokia on
> >what the difference was between 3.7 and 3.7.1. They really couldn't answer
> >it. From the notes, it appeared that all it did was include some new
> >drivers for newer hardware and they continued to maintain the two code
> >bases. This may be a concession to their users who can easily go to new
> >builds but might have a political problem going to a new version, even if
> >it is just a .1 release.
> >
> > Wasn't 3.8 required for R55P? I guess 3.9 for NGX is supposed to be out
> > within a month.
> >
> > Ray
> >
> >>From: Reinhard Stich <r.stich AT INTERNET-SECURITY DOT AT>
> >>Reply-To: Mailing list for discussion of Firewall-1
> >><FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
> >>To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> >>Subject: Re: [FW-1] IPSO code explaination
> >>Date: Fri, 10 Jun 2005 01:08:32 +0200
> >>
> >>hi,
> >>
> >>this is not official but what I have seen within the last years:
> >>
> >>new major-release (ipso 2 -> ipso 3):
> >> very big changes
> >>new minor-release (ipso 3.7 -> ipso 3.8):
> >> new features
> >>new sub-release (ipso 3.8 -> ipso 3.8.1):
> >> new drivers, no new "features", just changes in existing features
> >> support for new version of software (fw1)
> >>new build (ipso 3.8.1 build 13 -> ipso 3.8.1 build 15):
> >> bug fixes
> >>
> >>normally you install new ipso-versions because because
> >>* you need the new features
> >>* the new fw1-version requires this ipso-version
> >>* a behavior that you don't like is changed there
> >>
> >>cheers
> >>reinhard
> >>
> >>
> >>At 00:56 10.06.2005, you wrote:
> >>>I am not interested in know what are the new features in 3.8.1 or in any
> >>>other IPSO code. I am interested in knowing why there is 3.8 also 3.8.1.
> >>>For example, what 3.x means and what 3.x.1 means. In the other way, in
> >>>cisco code which I know, they have 12.2, also 12.2.xT. The former is a GD
> >>>code, the later is a testing code.
> >>>
> >>>Hope I make myself clear this time.
> >>>
> >>>----- Original Message ----- From: "Carole Berger" <berger AT SECARON DOT
> >>>LU>
> >>>To: <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
> >>>Sent: Thursday, June 09, 2005 12:05 PM
> >>>Subject: Re: [FW-1] IPSO code explaination
> >>>
> >>>
> >>>>Basically, this is the new feature for IPSO 3.8.1, I do not check if it
> >>>>is
> >>>>correspond to the new feature of 3.7.1 but I think this should be
> >>>>different.
> >>>>All detailed are in the complete release notes of IPSO 3.8.1 which can
> >>>>be
> >>>>download on the nokia web site if you have access to download IPSO or
> >>>>ask
> >>>>your partner to send this release to you...
> >>>>
> >>>>What's New in Nokia IPSO 3.8.1
> >>>>?? Support for Nokia IP265 and IP260 Platforms
> >>>>?? Link Aggregation
> >>>>?? SecureXL Enhancements
> >>>>?? RIP in a VRRP Environment
> >>>>?? IP Clustering Support for PIM
> >>>>?? VRRP for IPv6 Interfaces
> >>>>?? Support for New Nokia Encrypt Cards
> >>>>?? APC Simple Signaling Daemon (SSD)
> >>>>?? Configuration Summary Tool
> >>>>
> >>>>
> >>>>IPSO 3.8.1 includes the following fixes that were previously implemented
> >>>>in
> >>>>IPSO 3.8 build 039 and earlier:
> >>>>?? Fix for Denial of Service Vulnerability
> >>>>?? Fix for http Log Vulnerabilities
> >>>>?? Fix for BGP Vulnerabilities
> >>>>?? Fix for Upgrading IPSO on an IP2250
> >>>>?? Fix for DHCP Server Vulnerability
> >>>>?? Fix for Deleting Packages on an IP2250
> >>>>?? Fix to savecore Command for IP2250
> >>>>?? Fix for IPSO Kernel Crash
> >>>>?? Fixes for Hard Disk Failures
> >>>>?? Fix for Incorrect NoDiskSpace Trap
> >>>>?? Fixes for Gigabit Ethernet
> >>>>?? Fix to New Image Command on IP2250 Platform
> >>>>?? Fix for VRRP When Running Nokia Secure Access System
> >>>>?? Fix for OSPF Area Address Range
> >>>>?? Fix for OSPF Router ID
> >>>>?? Fix for Interoperability with Cisco Routers Running OSPF
> >>>>?? Fix for Network Voyager Connection Problem
> >>>>?? Fault Management Not Supported
> >>>>
> >>>>Hope it helps....
> >>>>
> >>>>Carole Berger
> >>>>
> >>>>=================================================
> >>>>To set vacation, Out-Of-Office, or away messages,
> >>>>send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> >>>>in the BODY of the email add:
> >>>>set fw-1-mailinglist nomail
> >>>>=================================================
> >>>>To unsubscribe from this mailing list,
> >>>>please see the instructions at
> >>>>http://www.checkpoint.com/services/mailing.html
> >>>>=================================================
> >>>>If you have any questions on how to change your
> >>>>subscription options, email
> >>>>fw-1-owner AT ts.checkpoint DOT com
> >>>>=================================================
> >>>
> >>>=================================================
> >>>To set vacation, Out-Of-Office, or away messages,
> >>>send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> >>>in the BODY of the email add:
> >>>set fw-1-mailinglist nomail
> >>>=================================================
> >>>To unsubscribe from this mailing list,
> >>>please see the instructions at
> >>>http://www.checkpoint.com/services/mailing.html
> >>>=================================================
> >>>If you have any questions on how to change your
> >>>subscription options, email
> >>>fw-1-owner AT ts.checkpoint DOT com
> >>>=================================================
> >>
> >>--
> >>Reinhard Stich ASSIST R.Stich AT internet-security DOT at
> >>Internet Security AG, 1150 Wien, Johnstrasse 29
> >>Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
> >>
> >>=================================================
> >>To set vacation, Out-Of-Office, or away messages,
> >>send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> >>in the BODY of the email add:
> >>set fw-1-mailinglist nomail
> >>=================================================
> >>To unsubscribe from this mailing list,
> >>please see the instructions at
> >>http://www.checkpoint.com/services/mailing.html
> >>=================================================
> >>If you have any questions on how to change your
> >>subscription options, email
> >>fw-1-owner AT ts.checkpoint DOT com
> >>=================================================
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-owner AT ts.checkpoint DOT com
> > =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
