I run P-1 NGX R61 and 100% of my database revision controls are written
correcly. I have never (Even going back to R55) had an emerency that I
couldn't revert out of..
Maybe you should upgrade.
On 9/26/06, cisco4ng <cisco4ng AT yahoo DOT com> wrote:
just have a story I want to share with everyone. This is
especially true for those who are familiar with database
revision control.
I have a P-1 NG with AI r55w. Everytime I push the policy
from a CMA to an enforcement module, i always create a new
database revision control so that if something go wrong,
I can revert back to my last "known good" configuration.
Everytime I created a new revision control the GUI message
told me that a revision control is successfully created. The
problem is that when I go into the $FWDIR/conf/db_versions/repository
direrctory of that particular CMA, I see a directory with
a particular number, like 72, is created but inside that
directory, I am not seeing the file ckp_mgmt_version.tar.gz
or if that file exists, the file size is zero. The problem is really
crapshoot, it works about 70% of the time. In other words, about
70% of the directory undere repository have the file and proper size
while the other 30% does not. Go figure.
I guess what I am trying to say is that you should NEVER
rely on the message from the SmartConsole to tell you that
a database revision control is successfully created. The
reality is that it may not create the file that you
expected. You should write your own script to check for
it. Otherwise, you will be sorry when you need to rollback
something and find out that the file is not there.
Thanks for writing buggy software checkpoint.
cisco4ng
---------------------------------
Get your own web address for just $1.99/1st yr. We'll help. Yahoo! Small
Business.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
