[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: RE: [FW1] management console upgrade (Very Urgent)




do you mean 'fw unload localhost'?

>From: Amin Tora <[email protected]>
>
>..if you have issues with the policy not allowing the remote GUI you "can"
>uninstall your policy (may leave your fw/network vulnerable for that period
>of time...depending on your setup and "control ip forwarding" option)...  
>
>so try this:
>
>on fw system console:  fw uninstall localhost
>
>-connect from GUI (as fast and soon as possible)
>-make necessary changes to policy
>-install policy
>
>...remember that until you install your policy your FW and network may be
>vulnerable during that period... so becareful.
>
>workaround for vulnerability period:
>
>disconnect fw from all network segments, use a cross over cable to connect
>another trusted GUI machine temporarily, and use above steps...
>
>good luck...
>
>-----Original Message-----
>From: Chris Hamilton [mailto:[email protected]]
>
>AFAIK there is no 'fwui' under 4.1 on Unix. You need to use the Motif
>GUI 'fwpolicy', but as you say you have no license (for some reason Unix
>users need to pay extra).
>
>You can however install the 4.1 GUI on a PC and make it a trusted GUI
>client with 'cpconfig'. This can get tricky when you are doing an
>upgrade however, because you need to make sure the new policy allows FW
>GUI connections between the PC and Firewall.
>
>Good Luck
>CHRiS
>
>Ahti Akel wrote:
>> 
>> Hi Rajesh,
>> 
>> There is a Setup.exe in /windows/CPMgmtClnt-4.1 directory on CD.
>> It installs components for fwui.
>> 
>> regards,
>> ahti akel
>> 
>> On Fri, Dec 29, 2000 at 02:12:28PM +1100, Rajesh Bandar wrote:
>> >
>> > Hi,
>> >
>> > I am trying to upgrade Checkpoint Firewall-1 management console from ver
>4.0 to
>> > ver 4.1. I installed the package CPfw1-41 from the CD. But there is no
>'fwui'
>> > file under /opt/CPfw1-41/bin directory.
>> >
>> > I don't have MOTIF license for management console. So I need to use
>'fwui' to
>> > update firewall rules.
>> >
>> > Should I install any other package.
>> >
>> > Thanks,
>> > Rajesh.
>> 
>-- 
>CHRiS



gg
(Like a seedling in Spring, green and vulnerable.)

------------------------------------------------------------
Email account furnished courtesy of AntiOnline - http://www.AntiOnline.com
AntiOnline - The Internet's Information Security Super Center!




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================