NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] RE: RE: (FW1) Moving FW1 gateway



AFAIK it is only supported on Suns. They have a hostid coded in their
firmware. Checkpoint (and others) have licensed based on this for a long
time. 

There are programs available for setting the hostid dynamically to permit
moving to a new platform without having to hassle with a new license. It is
no less secure than licensing on IP address when that can be an private
address that can be re-used or even an unused interface that can be
duplicated on multiple machines.

Jim

-----Original Message-----
From: [email protected]
[mailto:[email protected]]On Behalf Of
Murphy, Paul
Sent: Friday, 29 September 2000 4:05 a.m.
To: '[email protected]'; [email protected]
Subject: [FW1] RE: RE: (FW1) Moving FW1 gateway




Ooops....  how long has this been an option?  Doesn't this defeat the
licencing mechanism altogether?

Paul.


-----Original Message-----
From: [email protected] [mailto:[email protected]]
Sent: 28 September 2000 16:21
To: [email protected]; [email protected];
[email protected]
Subject: Re:RE: (FW1) Moving FW1 gateway


Unless you license by host id.

Yim

____________________Reply Separator____________________
Subject:    RE: (FW1) Moving FW1 gateway
Author: "Murphy; Paul" <SMTP:[email protected]>
Date:       9/28/00 7:00 AM

Something isn't right here.

Checkpoint FW1 products need to be installed with a licence key.  This key
is generated at the http://licence.checkpoint.com site, and is built from
the IP address of the Firewall and the Certificate key that comes with the
Firewall product.

If you have changed the IP address, then you need a new key.  I can't
understand how you have managed to get *any* data through the firewall.

The key generation is processed manually for IP address changes as you have
to include a reason for the change, and may have to provide some statement
that you are not contravening the licence.

This can take time, but can often be speeded up if your Checkpoint supplier
vouches for you.

Paul.


-----Original Message-----
From: raed al-tamim [mailto:[email protected]]
Sent: 27 September 2000 05:09
To: [email protected]
Subject: [FW1] Moving FW1 gateway



Hello all,
We have FW1 with VPN running on a Solaris 2.6 server, this last weekend
we had to move to a new location with a different ISP, and I had to
change the IP addresses (external and internal) to the FW.  After the
move, it seems that I can only get out with some applications, but
nothing can get into the LAN side.  I have changed the IP addresses on
the FW1 network objects to the new ones, I have even deleted the network
object, deleted the role, and re-created it for some applications but
still no luck.  Can any one help me find out what I need to do to get
things back on-line.  I asked the person who installed it if he had to
compile the IP address of either the external or internal interface when
he installed into any key or certificate but he said no, and I can't
find a document from checkpoint that talks about moving to a different
network or compiling the IP into any key.

Thanks for any help,

Raed Al-Tamim




============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


----------------------------------------------------------------------------
----
---------------------------------------
This e-mail is intended only for the above addressee.  It may contain
privileged information. If you are not the addressee you must not copy,
distribute, disclose or use any of the information in it.  If you have
received it in error please delete it and immediately notify the sender.

evolvebank.com is a division of Lloyds TSB Bank plc.
Lloyds TSB Bank plc, 71 Lombard Street, London EC3P 3BS.  Registered in
England, number 2065.  Telephone No: 020 7626 1500
Lloyds TSB Scotland plc, Henry Duncan House, 120 George Street,
Edinburgh EH2 4LH.  Registered in Scotland, number 95237.  Telephone
No:Lloyds TSB Bank plc and Lloyds TSB Scotland plc are regulated by the
Personal Investment Authority and represent only the Scottish Widows
and Lloyds TSB Marketing Group for life assurance, pensions and
investment business.

Members of the UK Banking Ombudsman Scheme and signatories to the UK
Banking Code.
----------------------------------------------------------------------------
----
---------------------------------------


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====
----------------------------------------------------------------------------
-----
This e-mail is intended only for the above addressee. It may contain
privileged information. If you are not the addressee you must not copy,
distribute, disclose or use any of the information in it. If you have
received it in error please delete it and immediately notify the
sender.

evolvebank.com is a division of Lloyds TSB Bank plc.
Lloyds TSB Bank plc, 71 Lombard Street, London EC3P 3BS.  Registered in
England, number 2065.  Telephone No: 020 7626 1500
Lloyds TSB Scotland plc, Henry Duncan House, 120 George Street,
Edinburgh EH2 4LH. Registered in Scotland, number 95237.  Telephone
No:Lloyds TSB Bank plc and Lloyds TSB Scotland plc are regulated by the
Personal Investment Authority and represent only the Scottish Widows
and Lloyds TSB Marketing Group for life assurance, pensions and
investment business.

Members of the UK Banking Ombudsman Scheme and signatories to the UK
Banking Code.
----------------------------------------------------------------------------
------


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents � 2003 Network Presence, LLC. All rights reserved.