Hi all
I fixed the problem and I though it would be useful to post here my solution
for similar cases.
There's a known bug regarding 500 users enterprise license for R55; CP claims
that this was fixed in HFA3 for IPSO 3.8. As a matter of facts it wasn't, but
it was fixed both in HFA5 for IPSO 3.8 *and* HFA16 for Win2003 (which I' m
running on management server). I needed both HFA in order to solve the
problem, so I guess it's common to (m)any platform.
Greetings to all
Lorenzo
On Wednesday 28 September 2005 00:33, Ray wrote:
> Hi Lorenzo,
>
> I can't help you with your licensing problem, but I believe you are
> actually on R55P on the Nokia enforcement modules and they must run IPSO
> 3.8. I think there is also an IPSO 3.8.1 version that was supposed to fix
> several problems, but I'm not using the "P" versions so I don't pay a lot
> of attention to them.
>
> Sounds like there's some confusion between you and Check Point over what
> versions you are actually running.
>
> The latest HFA for R55 is HFA16 and it has been available for download for
> a couple of weeks.
>
> I'm pretty sure you cannot run IPSO 3.7 with R55P. You might want to look
> into IPSO 3.8.1 if it does exist, as your first step. Or maybe take the
> management station to HFA16.
>
> Ray
>
> >From: Lorenzo <satana AT LIBERO DOT IT>
> >Reply-To: Mailing list for discussion of Firewall-1
> ><FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
> >To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> >Subject: [FW-1] License version might be not compatible - Error in
> > CP.macro Date: Tue, 27 Sep 2005 10:01:39 +0200
> >
> >Hi guys
> >I'm upgrading my licenses from Express to Enterprise; I have a management
> >server running on windows 2003 (R55) and two nokia vrrp cluster running
> >(all
> >four) on IPSO 3.8 and with R55. One cluster will have unlimited license,
> >while the other is going to have 500 users license.
> >
> >All went fine with the first cluster (running on Nokia IP 380), while I'm
> >getting the error in subject on the other one (running on Noka IP 530).
> >
> >Check Point licensng support suggests one of the two :
> >
> >1 - Install HFA16 on nodes & management. I'm struck with that, since the
> >latest hotfix for R55 is HFA13 (fot windows) and HFA5 for IPSO 3.8.
> >
> >2 - Rollback to IPSO 3.7. It would be a huge problem to go back to 3.7;
> > 3.9 is
> >out now, am I supposed to have 2 major release before ?
> >
> >Anyone got a similar message ? I can't find anything even in Secure
> >Knowledge...
> >
> >Thanx as always in advance
> >
> >Lorenzo
> >
> >=================================================
> >To set vacation, Out-Of-Office, or away messages,
> >send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> >in the BODY of the email add:
> >set fw-1-mailinglist nomail
> >=================================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http://www.checkpoint.com/services/mailing.html
> >=================================================
> >If you have any questions on how to change your
> >subscription options, email
> >fw-1-owner AT ts.checkpoint DOT com
> >=================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> ================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
