Re: [FW-1] Problems loading policies with NG FP1 (fw load)

[CryptoTech <cryptotech@FW1-NOSPAMGMX.DE>]

In NG, every policy load, and indeed almost all processes are validated by
the internal CA and referenced by their individual certificates.  If policy
has never been installed to the module, then it has no information on the
default install-on process.

In any case, fw load is typically run on the management station, and unless
the management station and any other relevant objects have had the objects
properties updates to reflect the NG FP1, there will be problems of this
nature.

Perhaps someone will care to elaborate more on this post.
----- Original Message -----
From: "Andreas Rieke" <andreas.rieke@ISL-ONLINE.DE>
To: <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
Sent: Saturday, January 26, 2002 2:12 PM
Subject: [FW-1] Problems loading policies with NG FP1 (fw load)


> Hi,
>
> in a distributed NG FP1 environment (with some 4.1 modules which are
working
> fine), there is a problem installing the first NG FP1 module to a
management
> system which has been upgraded from 4.1 to NG and then to FP1. On the
module,
> the fw load command with a predefined policy leads to an error "Cannot
find my
> network object" without installing the new policy. Although the secure
internal
> communication (SIC) is working, the fw load command on the management
(even with
> the -d option) does neither install the policy nor does it write any
messages to
> the screen.
>
> Management: Windows 2000 SP1
> FP1 module: Linux 2.2.19-17
>
> Thanks in advance for any help,
>
> kind regards,
>
> Andreas
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================