RE: [FW1] SP3 fixes...

["Cihan Subasi (Garanti Teknoloji)" <CihanS@FW1-NOSPAMgaranti.com.tr>]

I would'nt do same thing, stopping the firewall!!!!!!

-----Original Message-----
From: bandit@zcore.net [mailto:bandit@zcore.net]
Sent: Thursday, December 21, 2000 5:29 PM
To: Cihan Subasi (Garanti Teknoloji);
fw-1-mailinglist@lists.us.checkpoint.com
Subject: Re: [FW1] SP3 fixes...



That last problem I have also seen with 4.1 and 4.1 SP2 a couple times.

In my case, what I did to fix it was stop the fw services, restart them, and
then reload the policy. It looked to me more like the fw was just not taking
the new policy into affect even though everything compiled okay and claimed
to have transferred from the management server to the enforcement server.
Every time this has happened, just stopping the enforcement fw service and
restarting fixed it.

I must be lucky, never had any GUI problems.

----- Original Message ----- 
From: "Cihan Subasi (Garanti Teknoloji)" <CihanS@garanti.com.tr>
To: "Fw-1-Mailinglist (E-mail)" <fw-1-mailinglist@lists.us.checkpoint.com>
Sent: Thursday, December 21, 2000 2:00 AM
Subject: [FW1] SP3 fixes...


> 
> 
> With SP2 so we had two problems (for me they were very
> annoying).....One was with gui, when I tried to install a new policy after
> saving the policy GUI do not give any response and I should stop the tast
> from Task manager start again and load the policy and this happens very
> frequently...Second is on thefirewall eventhough there is a rule, module
> does see it and packet hits the last rule (deny all) and is denied, I have
> to negate that rule install the policy then disable the negate and install
> it again in order fw see that rule and allow the traffic...My questionis I
> checked the fixes of SP3 and did not see anything related to that issues,
I
> am wondering, am I the only one having those porblems or not? Thanks for
> your replies....
> 
> Merry Xmas and happy New Year....
> 
> *******************************************************************
> Cihan Subasi
> Garanti Technology-Istanbul
> Work phone: +(90)> Cellular       : +(90)> mailto:cihans@garanti.com.tr
> http://www.garanti.com.tr
> ********************************************************************
> 
> 
> 
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
> 



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================