Dear List
In the old days, there was a file called products.ini (or product.ini?)
which defines what products (modules) are installed on the firewall. And
if we wanted to remove something (e.g., to separate out management and
enforcement), it was possible to just edit this file.
Now the same information appears to be hidden in the registry directory
HLKM_registry.data file, e.g.,
/var/opt/CPshrd-R55/registry/HKLM_registry.data.
The portion for my management station shows this:
: (Products
:CPshared (1)
:FW1 (1)
:"Policy Server" (1)
:PPACK (1)
:FW1_41_BC (1)
:CPinfo (1)
)
I have no idea how it ended up like this as it is only a management station
- so FW1, Policy Server and PPACK shouldn't be there. It could have been
because we have always done upgrades (rather than fresh installs), so
historical information was carried over.
CP support says to remove those modules I need to do a fresh install. The
file can't be edited.
I'd like to avoid doing a fresh install. Does anyone know if there are
other ways to achieve what I want?
Thanks,
Huiqi
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
