[FW-1] host xxx did not complete installation (connection timeout)

[Kevin Leong <leongkevin@FW1-NOSPAMHOTMAIL.COM>]

Hi all,


I have a FW-1 4.1 management server and 2 firewall modules (full clustering
setup). When trying to install policy from the management server to the
gateway cluster (remote firewall modules), the second firewall has the
security policy installed successfully but not with the first firewall. It
gives an error stating "host firewallA did not complete installation
(connection timeout)" and often "Failed to Install Security Policy on
firewallA: Operation would block".


I've tried modifying the setup.C file by adding this line :fwd_conn_tout
(xxx) to increase the FW-1 Contol Connection timeout, using command line to
unload and load policy, re-booting the firewall machines but to no avail.


Pinging continuously from the management server to firewallA was perfect and
when tested with Any Any Any Accept, policy installation seems fine.
Rulebases were then re-created with simple rules for browsing and mailing
purposes. It seems that when more than 5 rules were created, the error as
above appears. This doesn't make sense at all. Any insights on this would be
of great help. Thanks.


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================