I have Provider-1 NGx R60 with HFA-02 with Active/Standby CMA managing a Nokia
IP650 running checkpoint NG Feature Pack 3 with HFA-327. In my security
policy,
I have the following:
Source dest service action track
any any any permit log
basically allow any. Using policy verification, it comes back and tell me
that
everything is OK. When pushing the policy, I get the following error:
Installation Targets Version Policy Type Details
dca2-Nokia-tier-1 NG FP3 Advanced Security
"/opt/CPmds-R60/customers/dca2-Juniper_Primary_CMA/CPngcmp-R60/conf/Juniper.pf",
line 2396: ERROR: function <dns_stream> undefined
dca2-Nokia-tier-1 NG FP3 Advanced Security
"/opt/CPmds-R60/customers/dca2-Juniper_Primary_CMA/CPngcmp-R60/conf/Juniper.pf",
line 2397: ERROR: syntax error
dca2-Nokia-tier-1 NG FP3 Advanced Security
"/opt/CPmds-R60/customers/dca2-Juniper_Primary_CMA/CPngcmp-R60/conf/Juniper.pf",
line 2398: ERROR: syntax error
dca2-Nokia-tier-1 NG FP3 Advanced Security
"/opt/CPmds-R60/customers/dca2-Juniper_Primary_CMA/CPngcmp-R60/conf/Juniper.pf",
line 2399: ERROR: syntax error
dca2-Nokia-tier-1 NG FP3 Advanced Security
"/opt/CPmds-R60/customers/dca2-Juniper_Primary_CMA/CPngcmp-R60/conf/Juniper.pf",
line 2400: ERROR: syntax error
dca2-Nokia-tier-1 NG FP3 Advanced Security
"/opt/CPmds-R60/customers/dca2-Juniper_Primary_CMA/CPngcmp-R60/lib/fwui_trail.def",
line 17: ERROR: forward declaration of table was not completed
dca2-Nokia-tier-1 NG FP3 Advanced Security Compilation failed.
dca2-Nokia-tier-1 NG FP3 Advanced Security Operation ended with errors.
I've come to the following conclusion: 1) either I am doing something wrong
or
2) Checkpoint has done a very poor job of QAing its products. Checkpoint is
becoming like Microsoft these days.
Has anyone seen this before?
As always, TIA
cisco4ng
---------------------------------
New Yahoo! Messenger with Voice. Call regular phones from your PC for low, low
rates.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
