RE: [FW1] Security Policy Download Error

[Yim Lee <yimwlee@FW1-NOSPAMyahoo.com>]

Add this         
:fwd_conn_tout (90)

to $FWDIR/lib/setup.C

HTH

Yim
--- Chris Arnold <chris.arnold@WheelHouse.com> wrote:
> I get this fairly often but the policy is in fact
> properly installed.  On
> the FW platform, try "$FWDIR/bin/fw stat" to compare
> time/date of the
> current installed policy with the last time you
> tried to push policy from
> the GUI.
>  
> Alternatively, it really isn't being installed.  On
> the FW platform, try
> "$FWDIR/bin/fwstop; $FWDIR/bin/fwstart" and watch
> the messages.  Is the
> policy correctly fetched from the master(s)
> (management console)?  If so,
> you could have a putkey issue so try reissuing the
> putkey for the management
> console on the FW  module.
>  
> Chris
> 
> -----Original Message-----
> From: Thuan Pham [mailto:tpham@ipverse.com]
> Sent: Wednesday, April 11, 2001 8:59 PM
> To: fw-1-mailinglist@beethoven.us.checkpoint.com
> Subject: [FW1] Security Policy Download Error
> 
> 
> 
>         Hello All: 
> 
>         I have a question on Downloading the
> Security Policy to CP
> Firewall-1 modules: 
> 
>         When I am downloading the Security Policy
> from Management Module to
> one of the Firewall-1 
>         Modules (enforcement points), I get the
> following error messages: 
> 
>         Standard.W: Security Policy Script generated
> into Standard.pf 
>         Standard: 
>         Compiled OK. 
> 
>         Downloading... 
> 
>         Downloading Security Policy
> /opt/CPfw1-41/conf/Standard.pf to hades 
>         Failed to Download Security Policy on hades:
> Resources temporarily
> unavailable 
>         Installing Security Policy on hades failed 
> 
>         As a note, I have set up authentication
> between the Management
> Modules and the Firewall-1 Modules and also 
>         configured the Firewall-1 module to know
> where to look for to
> download the Security Policy (e.g. who is the
> master).
> 
>         I would appreciate any insights/suggestions
> on how to solve this
> problem. 
> 
>         Thanks, 
> 
>         Thuan Pham 
> 
> 
> 


__________________________________________________
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================