[FW1] rulebases.fws file

["Steve" <yahoo@FW1-NOSPAMproph.co.uk>]

I'm maintianing two firewalls (not clustered) which act as dual-masters to a
number of firewalls for resiliance. All Firewalls log back to both masters,
however policies are loaded from one. Should the 1st fail the policies are
loaded from the 2nd.

Problem here is to keep the masters in synch for the policies. GUI is used
on the primary master but any changes need to be replicated to the secondary
master.

Important files are objects.C and rulebases.fws

However is there any way to generate .W and .pf from the rulebases.fws ??

I know you can go the otherway round but can you compile a rulebases.fws
into
respective .W and .pf files ??

If not the only way I can see to do it is either open each rulebase in the
rulebases.fws in the GUI which then creates the .W and .pf files. Or copy
the .W and .pf files across along with objects.C and fulebases.fws.

Also am I right in thinking that I need to copy the /state directory across,
else if the primary master fails the secondary won't know which policies
should go on which firewall modules?

Cheers,

-Steve



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================