Re: [FW-1] Configuring a policy server with FullCluster

[Simon Desmeules <simon@FW1-NOSPAMDESMEULES.COM>]

Ed, Check Point officially stated to me in the past that you may not have a
policy server as a member of your cluster... it will not work nor will they
even try to support it. You will have to install a Policy Server on a
seperate machine, away from the cluster.  I know this beats the purpose of
the cluster, but it won't work.

good luck,
Simon.
simon@desmeules.com

----- Original Message -----
From: "Edward J. Bradshaw" <biscuit@CLARK.NET>
To: <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
Sent: Friday, December 28, 2001 12:20 PM
Subject: [FW-1] Configuring a policy server with FullCluster


> I am running Stonebeat Fullcluster 2.0 (load balancing) and would like to
> configure a policy server to push desktop policy to Secure Client
> workstations.  I created a gateway using the shared IP of my two clustered
> gateways, which doesn't give me any errors but the policy does not seem to
> work, i.e. I set the desktop security to allow outgoing and encrypted, but
> you can still connect to a share on that workstation.  Has anyone had any
> luck with this?
>
> Is there a way to manually set up desktop security from the client itself?
>
> Ed Bradshaw
> biscuit@clark.net
>
> -----BEGIN PGP PUBLIC KEY BLOCK-----
> Version: PGP Personal Security 7.0.3
>
> mQGiBDoJt+cRBADUAFjhgP24BvQ8mBjDzDXLzV8xzy4S+bPWkitQtdE8gSVR5m02
> t7doXWNjToYgAM0QPVQerHY0adGqJCKaJcInQ4K/0hwWsHAGubWhmEFZ66QPuiCB
> 91epWUc4lfQyQKoSIzLgHXDVvWqiE4KW/ZntWFxmF1C3MPWRplAB+0qC0QCg//CF
> C6W9iRaWi7VkHsqqb2OfzdMD/RIEIZ871IdHeJVurv1DeRhDRdPnWmj6MDBpW8SW
> r7bEUtMmnS9HZ2NOBL61iOSEqv2WFnOoL/GtMaUEjhWSop0i0jHdqHO0VQ0945D7
> /00C+Axjy70faJmfNZ+1wQatutls/UEIxOWZryHzpkAw98qOpEzA66fYM/1iOzJP
> XpL6BAC7LKe0XGMy1XFACrr65BrwwwO6M9M6FeEnd7TlW5IRhtpyrck9cox1GTA/
> 5+WkO27F4b57s2HmH4VYbHx//nvB3shuT/g1xuLql/ypq5/nX5iWWGBNAFZxZZfj
> xcWPUelu8GFsoOU6j9nFkA7uvUg9VtEdiaagQIET/9ArkxsbU7QmRWR3YXJkIEou
> IEJyYWRzaGF3IDxiaXNjdWl0QGNsYXJrLm5ldD6JAE4EEBECAA4FAjoJt+cECwMC
> AQIZAQAKCRB4BScFbK3n3qrHAJwIGyOqRBDyct4cMkmiU6/on7r9BgCdFIiuS7+u
> AGJOE2CG+FMg7jVtT9K5BA0EOgm35xAQAPkYoH5aBmF6Q5CV3AVsh4bsYezNRR8O
> 2OCjecbJ3HoLrOQ/40aUtjBKU9d8AhZIgLUV5SmZqZ8HdNP/46HFliBOmGW42A3u
> EF2rthccUdhQyiJXQym+lehWKzh4XAvb+ExN1eOqRsz7zhfoKp0UYeOEqU/Rg4So
> ebbvj6dDRgjGzB13VyQ4SuLE8OiOE2eXTpITYfbb6yUOF/32mPfIfHmwch04dfv2
> wXPEgxEmK0Ngw+Po1gr9oSgmC66prrNlD6IAUwGgfNaroxIe+g8qzh90hE/K8xfz
> pEDp19J3tkItAjbBJstoXp18mAkKjX4t7eRdefXUkk+bGI78KqdLfDL2Qle3CH8I
> F3KiutapQvMF6PlTETlPtvFuuUs4INoBp1ajFOmPQFXz0AfGy0OplK33TGSGSfgM
> g71l6RfUodNQ+PVZX9x2Uk89PY3bzpnhV5JZzf24rnRPxfx2vIPFRzBhznzJZv8V
> +bv9kV7HAarTW56NoKVyOtQa8L9GAFgr5fSI/VhOSdvNILSd5JEHNmszbDgNRR0P
> fIizHHxbLY7288kjwEPwpVsYjY67VYy4XTjTNP18F1dDox0YbN4zISy1Kv884bEp
> QBgRjXyEpwpy1obEAxnIByl6ypUM2Zafq9AKUJsCRtMIPWakXUGfnHy9iUsiGSa6
> q6Jew1XrPdYXAAICD/9R4JtxcTbz/UvbDES/45xmcjI/qCZFBmqyW8cnC2gjtmpp
> D8+dFcxrw9YaN3gWh7mvfygYVbnSKtk/Mx7yDiV09ajW/zJN1IuUhsM3RRgJMey0
> +D6o5j6c1y2uru7KgGG1h224Xn0pHVDZXf4peKmn8m5ONE92s2mIAeH+IctKjujP
> 03/ykbvYIqoOUPoNzy3GBkOuzV0PToB0uHkB5hu43uMlHzvbwotYHP0nzfskr5zD
> duw+iPJHRBjIDCQdWnoYU2TZS/3yARIpeCOOfbCkLKjp6+Vw1UCyotE/zjooqUpv
> 1VBCISws4yres5Huu1Sob3TPLRR5Tad2SDNd+31psNKckRRbs29hNWa6h3V1AKGN
> G6lUqbOFu4aY0QmtGz84q8/zqdLJOBtH/fE+ekWQgd8LbVgls1FByz1tMT12AiCR
> 4DIZT2CAr/FuQs4sTjFYDUJh13I1j6naDvI5f0Oaaa9J1q/nsDVakDxS2tVXfCAb
> 06if8MZHAgdYin9RY40DHTUcohVIKfH5c5k1CWDE/aBfHgGUyR66wiGmbSmUqtz4
> SbRMdW8/EzAl2UOm055iXdzawGDQxxD5Ajaknuq6V/lNL6J5/8XCOzRrMsh9uilH
> VlWVWhh4E6+oWIMK82zNUHjjUSSnuXQOD03HU4YNojepG+BOg2PF3gwsLrt9pYkA
> RgQYEQIABgUCOgm35wAKCRB4BScFbK3n3uFyAKD42L1lzOpET2eNRmvm7olC1fBW
> uwCcDxt0/jYpU2PvaZYfZlL3Z3KzJqg=
> =r56W
> -----END PGP PUBLIC KEY BLOCK-----
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================