Re: [FW1] Failed to install 164.48.47.137's control security key: bad signature

[Rajeev Kumar <rajeev@FW1-NOSPAMrajeevnet.com>]

Graham,
 
[1] If you can afford then upgrade remote module to 4.1 also. I tried
this game earlier in my test lab and burnt with same problem.

[2]When you do fw putkey , it actually puts password in $FWDIR/{database,conf} area. There is an excellent note about this problem on phoneboy:
   http://www.phoneboy.com/fw1/faq/0038.html

Especially if you have encryption licenses and S/Key is used to authenticate, sometimes S/Key goes out of sync between management server and remote fw module and you have to delete these files and may be reboot required.

Good Luck!

Rajeev

Graham Leggett wrote:

Hi all,

I am still having no luck getting my v4.1 management console and v4.0
firewall to talk to each other. Currently the problem is this:

bash-2.02# ./fw stat xx.xx.xx.xx
HOST      POLICY     DATE
Failed to install xx.xx.xx.xx's control security key: bad signature
Authentication for command stat failed
Failed to get interface status on xx.xx.xx.xx: Unauthorized action

I have tried to use "fw putkey" on both machines to get them to talk to
each other, I have stopped both the firewall and console, run putkey on
both, then started them both up - still, they refuse to talk.

Is it physically possible for a v4.1 management console to talk to a
v4.0 remote module? According to the manual it is possible, but then
manuals are renowned for not being that accurate at the best of times.

I am thoroughly stuck - has anyone got any ideas on what to do?

Regards,
Graham
--

================================================================================
     To unsubscribe from this mailing list, please see the instructions at
              http://www.checkpoint.com/services/mailing.html
================================================================================

-- 
********************************************************************
        Rajeev Kumar (rajeev@rajeevnet.com)
                http://www.rajeevnet.com
********************************************************************
 



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================