Firewall-1

Re: [FW-1] ipso 4.1b25 with R55P not performing full sync

Subject: Re: [FW-1] ipso 4.1b25 with R55P not performing full sync
From: Ronny Vaningh <ronny AT NETRUSION DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Tue, 13 Mar 2007 08:10:23 +0100
Rajeev

Enable Monitor Firewall State: it was disabled in our case - so check it out
in your Voyager configs.

Monitor FW state was on


Also, do not need Coldstart delay - we removed the interval - it is blank
now (in our case due to some engineer - not sure what is the default value -
it was set to 300secs).

Coldstart delay was already set to the default blank value

300 secs. ... did you had 3.7 on this box before ... there it wasn't possible to do fw state monitoring and you needed to work with coldstart delay. In 3.8/39 the value disapeared from the gui but if you upgrade to 4.1 your 3.7 value resurfaces.

But I guess 'enabling firewall state monitoring' fixed the issue even though
we did not test it further by enabling 'coldstart delay'

If had the same issue on a box with coldstart delay and there I could get it working by turning it of.

On the second cluster which was upgraded from a fresh 3.9 build I can't get it to work


Ronny

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>