Hello,
I have noticed that when you connect to the primary management server with
RW access and open an object's properties window, then close it by pressing
the "Ok" button, the two management servers appear to out of sync. If you
wish do the following experiment: connect with RW access, open the
properties window of an object, press the "Ok" button without making any
change and then close SmartDashboard. It will present you a window asking to
save the policy. Most people tend to save the policy, which I guess makes
the policy stored on the primary management server newer than the one stored
on the secondary management server, although in reality they are exactly the
same. I had similar problems with installations at clients and I solved them
by creating a new time object so that auto-sync would take place every hour.
It just synchronizes the two servers more often so that my clients wouldn't
notice it. Keep in mind that such a configuration will increase the traffic
in your network, which might cause problems if you have a large object
database and a small link between your management servers.
On 21/12/05, Mo, Danny <danny.mo AT travelexamericas DOT com> wrote:
>
> Yes, both mgmt server are on Windows 2003 with SP1. We even rebuilt the
> secondary once but auto-sync still failed. Manual sync works though.
>
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of
> Michael
> J. Semaniuk
> Sent: Wednesday, December 21, 2005 10:58 AM
> To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> Subject: Re: [FW-1] Windows 2003
>
> You need to run the same version of the OS on all of your management
> servers. Did you migrate the secondary to Windows 2003 as well?
>
> -Mike
> ----- Original Message -----
> From: "Mo, Danny" <danny.mo AT TRAVELEXAMERICAS DOT COM>
> To: <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
> Sent: Wednesday, December 21, 2005 9:54 AM
> Subject: [FW-1] Windows 2003
>
>
> Ever since our Primary Mgmt server got migrated from Windows 2000 to
> Windows 2003, the automatic sync doesn't work no more. Does any have
> experience with same? Both Primary and Secondary Mgmt servers are
> running NG AI R55 with HFA13.
>
> Danny Mo
>
>
>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
