I would
also try doing a “fw fetch –d” from the firewall module and carefully read
through the debug output for the specific error. I have had this same problem before. It was a putkey issue that caused
it. You may need to clean out all
of the keys on both the management and the module.
Chad T. Mansfield
Phone:
Security Engineer
Fax:
Mobile:
The Hull Group, A Goldman Sachs Company
311 S. Wacker Dr., Suite 1400
Chicago, IL 60606
-----Original
Message-----
From: Chris Arnold
[mailto:[email protected]]
Sent: Friday, April 13, 2001 11:15
AM
To: 'Thuan Pham';
[email protected]
Subject: RE: [FW1] Security Policy
Download Error
I get this fairly often
but the policy is in fact properly installed. On the FW platform, try
"$FWDIR/bin/fw stat" to compare time/date of the current installed
policy with the last time you tried to push policy from the GUI.
Alternatively, it really
isn't being installed. On the FW platform, try "$FWDIR/bin/fwstop;
$FWDIR/bin/fwstart" and watch the messages. Is the policy correctly
fetched from the master(s) (management console)? If so, you could have a
putkey issue so try reissuing the putkey for the management console on the
FW module.
Chris
-----Original
Message-----
From: Thuan Pham [mailto:[email protected]]
Sent: Wednesday, April 11, 2001
8:59 PM
To:
[email protected]
Subject: [FW1] Security Policy
Download Error
Hello All:
I have a question on Downloading the Security
Policy to CP Firewall-1 modules:
When I am downloading the Security Policy from
Management Module to one of the Firewall-1
Modules (enforcement points), I get the following error messages:
Standard.W:
Security Policy Script generated into Standard.pf
Standard:
Compiled OK.
Downloading...
Downloading
Security Policy /opt/CPfw1-41/conf/Standard.pf to hades
Failed to Download Security Policy on hades: Resources temporarily
unavailable
Installing Security Policy on hades failed
As a note, I have set up authentication between
the Management Modules and the Firewall-1 Modules and also
configured the Firewall-1 module to know where to look for to
download the Security Policy (e.g. who is the master).
I would appreciate any insights/suggestions on
how to solve this problem.
Thanks,
Thuan Pham