RE: [FW1] DES to 3DES

["Luke, Jason (ISS Southfield)" <jluke@FW1-NOSPAMiss.net>]

You have the correct licenses.
cpfw-fig-250-v41			= 1 FW + 1 Mgmt station license,
must be on the same box.
cpfw-enc-250-3des-module-v41 	= 3DES encryption for FW module
cpfw-enc-250-3des-mgmt-v41 	= 3DES encryption for Mgmt station.

Those three licenses could be combined into one, a CPVP-VIG-250-3DES-v41,
which is basically a FIG with encryption. (FIG+vpn=VIG)  

As for your problem, unless you find someone who has actually gone from 4.1
SP1 DES to SP2 3DES successfully with no problems, I would recommend that
you uninstall and reinstall.  However, since you would go that far anyway,
you might as well try the SP1 DES to SP2 3DES, attempt a vpn and if you have
no problems, then all is well.  If you have problems, back to plan A and
uninstall and reinstall.  Let us know if it works if you do attempt it.

Jason Luke
Internet Security Systems



-----Original Message-----
From: Paul Niebuhr [mailto:pniebuhr@lssdata.com]
Sent: Thursday, November 16, 2000 4:40 PM
To: Firewall-1 Mailing List; Barcus, Timothy
Subject: RE: [FW1] DES to 3DES


Here are our license features:
cpfw-enc-250-3des-module-v41 cpfw-enc-250-3des-mgmt-v41 CK-84AB4...
cpfw-fig-250-v41 CK-8D4CA....

What does the feature string look like for 3DES fig?

Paul


***On Thu 2:41p Nov 16 Barcus, Timothy <TimothyBarcus@chi-east.org> wrote***
What product and features are listed in your licenses?  My understanding was
that it wasn't a difference in the 4.1 (i.e. 2000) platform code and it was
a license issue, which is how I did mine earlier this year on 4.1SP1 with a
license change (don't forget the -o on your initial license change).

-----Original Message-----
From: Paul Niebuhr [mailto:pniebuhr@lssdata.com]
Sent: Thursday, November 16, 2000 3:20 PM
To: Firewall-1 Mailing List
Subject: [FW1] DES to 3DES


Our upgrade path (NT) has been 4.0 SP7 -> 4.1 SP1 -> 4.1 SP2 all using DES
software.  We would now like to upgrade to 4.1 SP2 3DES.  We have been told
by one Check Point engineer that we need uninstall the Firewall-1 product
and then reinstall the 3DES version.  Another Check Point engineer told us
that we only need to uninstall SP2 and reinstall it using a 3DES version and
I saw in the mailing list archives that I could just "upgrade" to 3DES.

Also, we have a 3DES encryption license and our Firewall-1 gateway license
doesn't reference either DES or 3DES.  According to Check Point we don't
need to change our license but our reseller/vendor thinks we will need a new
Firewall-1 license to use 3DES.

Does anyone have any experience with this procedure and what path we need to
follow to change to 3DES?


Thanks,


Paul Niebuhr, Computer Scientist
LSS Data Systems
6423 City West Parkway, Eden Prairie, MN  55344================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================