[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Coexistence 4.1/NG
Yannick and others, Having done it, and several times to test it before in our lab. Here are the things I experienced. Yes you can run a NG FP1 Management Server and manage 4.1 modules, but, in the lab I did not have to redo the putkey stuff just a download of the security policy and everything started working. At a customer, upgraded yesterday, I had to redo the whole putkey stuff as the 3 Firewall modules stopped logging and I was not able to fetch nor push security policies. Further more if you are running Floodgate-1 and SecureClient watch out, I have a strange problem escalated to CheckPoint for the moment with this combination, reproducible at will. With regards to the modules, upgrade one first, then the second one when you are sure the other one can get it's policy and log to the Management Server, this is the way I plan to upgrade the modules of the installation I was talking about. I have some other minor 'cosmetic' issues too ... but have work-around in place for them. Met vriendelijke groeten - Bien a vous - Kind regards Guy ROELANDTS EMEA GS Internet Expertise Centre - CCSA & CCSE Compaq Software Engineer - Belgium E-mail : [email protected] Tel: +32(02)729.77.44 (options 3 - 3 - 1) Fax: +32(02)729.77.65 ========================================================== This message may contain confidential and/or proprietary information, and is intended only for the person/entity to whom it was originally addressed. The content of this message may contain private views and opinions which do not constitute a formal disclosure or commitment unless specifically stated. Should you receive this message by mistake please inform the sender immediately. ========================================================== -----Original Message----- From: Yannick Lo Guidice [mailto:[email protected]] Sent: 13 February 2002 18:51 To: [email protected] Subject: [FW-1] Coexistence 4.1/NG Hi folks, I have a couple of firewalls and a management station running FW1 4.1. My customer wants to upgrade to NG... This is causing a number of problems, like: Can I install NG on the management station and make NG and 4.1 working at the same time ? Can I make the upgrade operation one firewall at the time and keep the service running (the firewalls have high availability) ? Anyway, I would appreciate any information/experience on this operation which seems to be tricky. Thanks -- Yannick Lo Guidice rfc 1149 & 2549 e-expert [email protected] Tel : +33 4 9211 5967 Fax : +33 4 9211 5959 IBM Global Services NDSC France ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|