RE: [FW1] Install Security Policy - No Response from Server

[Mike Glassman - Admin <admin@FW1-NOSPAMiaa.gov.il>]

One other way is to simply manually save the policy, and then restart the
server.

This should install the new policy as the server starts up.

Mike

> -----Original Message-----
> From:	Ejvind Kristian [SMTP:kristian.ejvind@spp.se]
> Sent:	ã àå÷èåáø 04 2000 10:43
> To:	'Firewall Admin'; fw1 mailinglist
> Subject:	RE: [FW1] Install Security Policy - No Response from Server
> 
> 
> > years until recently when my FW1 v4.0 sp3 Windows GUI (build 4058)
> > has been giving me "No Response from Server" error messages whenever
> > I try to install a new policy.  When I select the Install 
> 
>   We've had the same situation here. It's simply that the
> rule base is so complex that it takes more than 15 seconds
> for your firewall to process and save them. If you look
> at the fw processes you will (at least on Solaris) see that 
> the process that serves you is using 100% cpu while the
> save is taking place.
>   The easiest solution is to _not_ touch the 'No response from
> server' message box for 10-15 seconds to give the server
> time to completely process the rule base. Then, when you press
> OK, the normal 'install on...' box will appear.
>   The slightly more compex solution is to follow this advice
> from CP:
> 
> ---
> Solution: 
> How to extend the timeout between the Windows / Motif GUI and FWM () 
> The default GUI timeout for communication between the GUI and FWM is 15
> seconds. If this is not enough time, the timeout can be extended in the
> following way:
> 
> On UNIX - define the environment variable SERVER_TIMEOUT and give it an
> appropriate value in seconds. An easy way of doing this is by inserting
> the
> setenv command into the "fwpolicy" script, before the line that runs fwui.
> 
> On NT - Use regedt32, path
> HKEY_LOCAL_MACHINE/SOFTWARE/CheckPoint/FireWall-1. Create a variable
> "ServerTimeout" of type REG_DWORD, and give it an appropriate value in
> seconds.
> ------
> 
> 
> /Kristian
> 
> -----------------------------------------
> Kristian Ejvind - Kristian.Ejvind@spp.se
> System admin at SPP Investment Management 
> -----------------------------------------
> 
> 
> ==========================================================================
> ======
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================