RE: [FW1] FW1 v4.1 Mgmt Server Backward Compatability License Req uirements

["Hines, Stephen (ISSAtlanta)" <SHines@FW1-NOSPAMiss.net>]

According to Checkpoint web site:

Solution: 
How to make Management Module version 4.1 backward compatibility with
version 4.0 Inspection modules?  
NT:
When installing management module 4.1, check the backward compatible option
and Install a 4.0 license on the management module in addition to a 4.1
license

UNIX:
If you install the backward compatibility feature, you will need a valid
Version 4.0 license on the Management Module in order to manage Version 3.0
or Version 4.0 VPN/FireWall Modules.
After installing the backward compatibility feature, install the Version 4.0
license as follows:

1. Set the FWDIR environment variable to point to the directory where
Version 4.0 is
installed.
2. Install the Version 4.0 license using the $FWDIR/bin/fw putlic command.
3. Restore FWDIR to its previous value (that is, to point to the directory
where Version
4.1 is installed).
platform directory:
Solaris /opt/CKPfw
HP /FireWall-1
AIX /usr/lpp/FireWall-1 

So you do need a 4.0 license in addition to your current one.

Regards,
Stephen 

-----Original Message-----
From: Firewall Admin [mailto:fwadm@yahoo.com]
Sent: Friday, September 08, 2000 1:19 PM
To: fw1 mailinglist
Subject: [FW1] FW1 v4.1 Mgmt Server Backward Compatability License
Requirements



I have two FW1 Enterprise firewall "clusters", a v4.0
Management Server controlling two v4.0 Firewall Modules,
and a new v4.1 Management Server controlling two separate
v4.1 Firewall Modules.  I would like the new v4.1 Management
Server to control both the new v4.1 Firewall Modules and the 
old v4.0 Firewall Modules, and built it with that capability 
in mind.  The question I have is do I need a current v4.0 
control license on my v4.1 Management Server to control my 
v4.0 Firewall Modules?

I built the new Management Server by first installing v4.0
on it with an evaluation license, copying my current objects,
policy and other required files.  I then installed v4.1 and
performed an upgrade with the backward compatability option
specified.

My VAR says that I have to purchase a v4.0 license for the
new Management Server for this to work.  I don't think I can
use my old v4.0 license since it specifies an IP address of
my old v4.0 Management Server.  That server is still in use,
and want to be able to continue using if so desired.

My thinking is that a license should only be required for 
the v4.1 code on the new Management Server, regardless of 
what firewall module version it is being used to control.
The VAR says that the compatability option actually uses 
v4.0 code that still resides on the v4.1 Management Server 
after the upgrade (or compatability feature install) and
requires its own license.

Does anyone have any experience with this?
Do I have to purchase a new v4.0 license?
Can I just request a v4.0 license for the v4.1 code 
I already have?  If so, is there supposed to be an 
additional charge?

I have not seen this issue brought up on the list.
Thanks in advance.

b




__________________________________________________
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================