RE: [FW1] Nokia: Possible serious bug in IPSO Voyager interface.

[Rogue Bolo <roguebolo@FW1-NOSPAMyahoo.com>]

The Check Point Nokia relationship has always been a
troubled one, polluted by personalities but the bottom
line is the. Nokia and Check Point are engaged in
large accounts on a daily basis. They have each become
such a large part of each others' business that
terminating the relationship would not be cost
effective.

--- Thomas Poole <tpoole@arsenaldigital.com> wrote:
> Bolo,
> 
> I agree that Nokia is a good product, but Checkpoint
> and Nokia have not
> exactly been the best of friends lately.
> I hear the relationship is waning, possibly nearing
> an end (have not been
> able to fully validate this). 
> 
> I fear the huge installs out there that will
> eventually have to drop in new
> boxes to support their networks.
> 
> 
> Thomas Poole
> 
> -----Original Message-----
> From: Rogue Bolo [mailto:roguebolo@yahoo.com]
> Sent: Sunday, October 29, 2000 1:12 AM
> To: Scott Becker; Mcmeesm@rbos.co.uk;
> cristian.nicolae@chello.at
> Cc: fw-1-mailinglist@lists.us.checkpoint.com
> Subject: RE: [FW1] Nokia: Possible serious bug in
> IPSO Voyager
> interface.
> 
> 
> 
> Disappointed with Nokia's attitude toward support?
> Why
> rely on the VAR? Did you BUY direct support? Are you
> smoking crack? Nokia's support is the best there has
> ever been for Check Point, not to mention their own
> products. I am sure that there are individuals on
> the
> support desk that have not ever run across this
> static
> route issue. That does not mean by any stretch of
> the
> imagination that Nokia has turned a blind eye to the
> issue. I am certain that there is no "hard coded"
> restriction in IPSO regarding static routes. Yes, it
> is buggy, yes it could be better, but as I have
> mentioned previously the addstatic tool available
> via
> resolution definitely fixes this and definitely
> works.
> I believe the problem is tied to the relationship
> between the Voyager CGI-BINs and the configuration
> database, not an integral flaw. As with any product
> there is a wide range of skills sets not just with
> Nokia VARs but also with the Tier 1 support people
> at
> Nokia. It would be impossible for an organization
> that
> has grown to this level in this short a time to have
> Jerald Josephs and Phoneboy clones sitting at every
> support desk. I find it interesting that the big
> organizations and seasoned professionals do not have
> the kind of issues that others do, maybe they take
> the
> time to know a product rather than just become
> familiar with it. <endflame>
> --- Scott Becker <scotbecker@hotmail.com> wrote:
> > 
> > Yeah, i am dissapointed as well with Nokia's
> > attitude toward support, why do 
> > they want us to rely on their VAR ?
> > 
> > Why can't they support it on their own ?
> > 
> > I have to say that the Nokia platform is really
> cool
> > and we like it a lot. 
> > However, for such a good product their support is
> > really down the tubes.
> > 
> > Dissapointed.
> > 
> > 
> > From: "McMeekin, Scott" <Mcmeesm@rbos.co.uk>
> > To: "'roguebolo@yahoo.com'" <roguebolo@yahoo.com>,
>  
> >      Cristian Nicolae  
> > <cristian.nicolae@chello.at>
> > CC: "'fw-1-mailinglist@lists.us.checkpoint.com'"  
> > <fw-1-mailinglist@lists.us.checkpoint.com>
> > Subject: RE: [FW1] Nokia: Possible serious bug in
> > IPSO Voyager interface.
> > Date: Fri, 20 Oct 2000 16:43:07 -0000
> > 
> > 
> > Thanks for this RB - I'll check it out.
> > 
> > Further to this, I got a response from my VAR on
> > this. Apparently Nokia
> > declined to give out an official announcement on
> > this but what they did say
> > was that they are aware of a flaw in the voyager
> > interface that could be in
> > some way linked to the way Netscape caches pages.
> > They apparently said that
> > you are restricted to 64 static routes in the
> > interface, but after that
> > anything goes... I wasn't very happy with that to
> be
> > honest - god knows what
> > was going through the developers minds to put in a
> > hard coded restriction
> > like that if that's true.
> > 
> > What they DID say was that this bug would be
> > addressed in IPSO release v3.3,
> > which should be available in the next few weeks
> > sometime, and that they
> > recommended upgrading to that version when
> possible.
> > 
> > I have to say, I'm a bit disappointed in Nokia's
> > attitude on this. As far as
> > I'm concerned, any alledged bug that causes
> routing
> > entries to become
> > disabled is, in my view very serious - if CISCO
> > routers had a bug that
> > caused routes to vanish, you'd be damn sure that
> > CISCO would move hell and
> > high water to reassure people that it would be
> fixed
> > immediately, and they'd
> > be releasing announcements to reduce the exposure
> of
> > people using their
> > products. I don't want anyone to take this out of
> > context - this has only
> > happened twice in 2 years of using the Nokia IP
> > range, but twice is one more
> > than a "flash in the pan" incident. I've grown to
> > trust and respect the
> > Nokia product range as being of a cut above the
> rest
> > in both quality of
> > product, and also quality of support. "Oh we think
> > the next release will fix
> > it - wait till then, and by the way, we're not
> going
> > to tell anyone else
> > about it" is an unacceptable response, especially
> > considering even Micro$oft
> > release immediate hotfixes for bugs that impact
> > service.
> > 
> > Disappointed,
> > 
> > Scott.
> > 
> > -============================-
> >   Scott McMeekin (x25086)
> >     Senior Technical Analyst
> >           IT Telecoms
> >    The Royal Bank of Scotland
> >    Phone: +44(0)> >    Email: mcmeesm@rbos.co.uk
> > -============================-
> > 
> >  > -----Original Message-----
> >  > From:	Rogue Bolo [SMTP:roguebolo@yahoo.com]
> >  > Sent:	Friday, October 20, 2000 3:29 PM
> >  > To:	Cristian Nicolae; McMeekin, Scott
> >  > Cc:	'fw-1-mailinglist@lists.us.checkpoint.com'
> >  > Subject:	Re: [FW1] Nokia: Possible serious bug
> in
> > IPSO Voyager
> >  > interface.
> >  >
> >  >
> >  > *** Warning : This message originates from the
> > Internet ***
> >  >
> >  > Using Voyager to add static routes is not a
> > generally
> >  > reliable mechanism. I suggest that you use the
> >  > addstatic utility which is available from the
> > support
> >  > site. It lets you import a flat file of static
> > routes
> >  > and correctly inserts them into the
> configuration
> >  > database. If you are extremely careful, you can
> >  > manually edit the active.db and initial.db
> files
> > to
> >  > add static routes. If this is not done properly
> > the
> >  > routes will not stick. Voyager should not be
> > relied
> >  > upon for detail of static route information,
> > rather
> >  > the show routes from iclid.
> >  >
> >  > --- Cristian Nicolae
> <cristian.nicolae@chello.at>
> >  > wrote:
> >  > >
> >  > > Scott,
> >  > > I am running the same version of IPSO and
> once
> > I had
> >  > > a situation similar
> >  > > to yours.
> >  > > I have about 12 static routes configured on
> the
> > box.
> >  > >
> >  > > Once it happened to me that one was lost.
> >  > > As it only happened to me once I didn't payed
> > too
> >  > > much attention.
> >  > > One lesson I learned from then was to look
> very
> >  > > carefully at the static
> >  > > routing table after a new static route is
> added
> > and
> >  > > afterwards saved in
> >  > > Voyager.
> >  > >
> >  > > Have you static routes disspeared after the
> > routing
> >  > > table was changed
> >  > > somehow in Nokia
> >  > > (add or remove a route)?
> >  > >
> >  > > Cristian
> >  > >
> >  > >
> >  > >
> >  > >
> >  > > "McMeekin, Scott" wrote:
> >  > > >
> >  > > > Hi,
> >  > > >
> >  > > > I am unable to reproduce this problem, but
> > it's
> >  > > happened twice now and it's
> >  > > > causing real concern. Has anyone else who
> is
> >  > > running Nokia firewalls ever
> >  > > > experienced an inexplicable loss of a
> > variable
> >  > > number of static routes? I'm
> >  > > > using F-secure ssh v1.0 and Netscape
> > Navigator to
> >  > > securely forward the http
> >  > > > Voyager interface to an IP440 running IPSO
> > 3.2.1.
> >  > > >
> >  > > > What happened was at some point in the last
> > couple
> >  > > of days I've been using
> >  > > > the voyager interface to look at a few
> things
> > (no
> >  > > changes were made). Today
> >  > > > I get a call to say some connectivity has
> > been
> >  > > lost, and on checking various
> >  > > > routing tables in other routers, certain
> > routes
> >  > > appeared to have vanished. I
> >  > > > checked the firewall and Lo and Behold, 15
> > static
> >  > > routes (which get
> >  > > > redistributed internally) had vanished!
> After
> > the
> >  > > initial scratching of
> >  > > > heads, I restored the IPSO backup and all
> was
> >  > > well, however this a serious
> >  > > > enough occurance to merit immediate and
> > thorough
> >  > > investigation.
> >  > > >
> >  > > > Anyone experienced this before I go wading
> > into
> >  > > the support channels?
> >  > > >
> >  > > > Many thanks,
> >  > > >
> >  > > > Scott.
> >  > > >
> >  > > > The Royal Bank of Scotland plc is
> registered
> > in
> >  > > Scotland No 90312. Registered Office: 36 St
> > Andrew
> >  > > Square, Edinburgh EH2 2YB.
> >  > > >
> >  > > > The Royal Bank of Scotland plc is regulated
> > by
> >  > > IMRO, SFA and Personal Investment Authority.
> >  > > >
> >  > > > This e-mail message is confidential and for
> > use by
> >  > > the addressee only.  If the message is
> received
> > by
> >  > > anyone other than the addressee, please
> return
> > the
> >  > > message to the sender by replying to it and
> > then
> >  > > delete the message from your computer.
> >  > > >
> >  > > > 'Internet e-mails are not necessarily
> secure.
> > The
> >  > > Royal Bank of Scotland plc does not accept
> >  > > responsibility for changes made to this
> message
> >  > > after it was sent.'
> >  > > >
> >  > > >
> >  > >
> >  > 
> >
>
==========================================================================
> >  > ======
> >  > > >      To unsubscribe from this mailing list,
> > please
> >  > > see the instructions at
> >  > > >
> >  > >
> http://www.checkpoint.com/services/mailing.html
> >  > > >
> >  > >
> >  > 
> >
>
==========================================================================
> >  > ======
> >  > >
> >  > >
> >  > >
> >  > 
> >
>
==========================================================================
> >  > ======
> >  > >      To unsubscribe from this mailing list,
> > please
> >  > > see the instructions at
> >  > >
> >  > >
> http://www.checkpoint.com/services/mailing.html
> >  > >
> >  > 
> >
>
==========================================================================
> >  > ======
> >  >
> >  >
> >  >
> > __________________________________________________
> >  > Do You Yahoo!?
> >  > Yahoo! Messenger - Talk while you surf!  It's
> > FREE.
> >  > http://im.yahoo.com/
> > 
> > 
> > The Royal Bank of Scotland plc is registered in
> > Scotland No 90312. 
> > Registered Office: 36 St Andrew Square, Edinburgh
> > EH2 2YB.
> > 
> > The Royal Bank of Scotland plc is regulated by
> IMRO,
> > SFA and Personal 
> > Investment Authority.
> > 
> > This e-mail message is confidential and for use by
> > the addressee only.  If 
> > the message is received by anyone other than the
> > addressee, please return 
> > the message to the sender by replying to it and
> then
> > delete the message from 
> > your computer.
> > 
> > 'Internet e-mails are not necessarily secure. The
> > Royal Bank of Scotland plc 
> > does not accept responsibility for changes made to
> > this message after it was 
> > sent.'
> > 
> > 
> >
>
============================================================================
> ====
> >       To unsubscribe from this mailing list,
> please
> > see the instructions at
> >                
> > http://www.checkpoint.com/services/mailing.html
> >
>
============================================================================
> ====
> > 
> >
>
_________________________________________________________________________
> > Get Your Private, Free E-mail from MSN Hotmail at
> > http://www.hotmail.com.
> > 
> > Share information about yourself, create your own
> > public profile at 
> > http://profiles.msn.com.
> > 
> > 
> > 
> >
>
============================================================================
> ====
> >      To unsubscribe from this mailing list, please
> > see the instructions at
> >               
> > http://www.checkpoint.com/services/mailing.html
> >
>
============================================================================
> ====
> 
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Messenger - Talk while you surf!  It's FREE.
> http://im.yahoo.com/
> 
> 
>
============================================================================
> ====
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====


__________________________________________________
Do You Yahoo!?
Thousands of Stores.  Millions of Products.  All in one Place.
http://shopping.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================