[FW1] DES to 3DES

["Roelandts, Guy" <Guy.Roelandts@FW1-NOSPAMcompaq.com>]

Hi Paul,

  Looking at your licenses they seem to be 3DES, and you can use them
 on a DES installation ?? Strange, we tried this but it didn't work !!

  This is the answer I got from CheckPoint a while back when I asked
 them how to upgrade :

As far as you question about encryption and licenses.  There is not
a quick and easy way to increase the encryption capability of the firewall
software. The encryption capability is built into the kernel, so to
increase the encryption of the firewall, you will need the proper kernel.

This means you will need to reinstall the firewall with a 3DES version
of the software.  This is relatively painless, if you copy the contents
of the conf directory, and then after installing the 3DES version,
replace its conf directory contents with the old conf directory, you
will get back all of your objects and rules.

Met vriendelijke groeten - Bien à vous - Kind regards

Guy ROELANDTS
Compaq Software Engineer - Belgium
E-mail : Guy.Roelandts@compaq.com
Tel: +32(02)729.77.44
Fax: +32(02)729.77.65

-----Original Message-----
From: Paul Niebuhr [mailto:pniebuhr@lssdata.com]
Sent: Thursday, November 16, 2000 9:20 PM
To: Firewall-1 Mailing List
Subject: [FW1] DES to 3DES


Our upgrade path (NT) has been 4.0 SP7 -> 4.1 SP1 -> 4.1 SP2 all using DES
software.  We would now like to upgrade to 4.1 SP2 3DES.  We have been told
by one Check Point engineer that we need uninstall the Firewall-1 product
and then reinstall the 3DES version.  Another Check Point engineer told us
that we only need to uninstall SP2 and reinstall it using a 3DES version and
I saw in the mailing list archives that I could just "upgrade" to 3DES.

Also, we have a 3DES encryption license and our Firewall-1 gateway license
doesn't reference either DES or 3DES.  According to Check Point we don't
need to change our license but our reseller/vendor thinks we will need a new
Firewall-1 license to use 3DES.

Does anyone have any experience with this procedure and what path we need to
follow to change to 3DES?


Thanks,


Paul Niebuhr, Computer Scientist
LSS Data Systems
6423 City West Parkway, Eden Prairie, MN  55344================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================