[FW-1] Problems with "unknown established" in mixed NG/4.1 environment

[Ketil Adolfsen <kad@FW1-NOSPAMALLIANSE.NO>]

I tried upgrading the management console for a customer from 4.1
sp5 to NG FP1/HF2. Firewall modules still running 4.1 sp5, but it is
supposed
to be supported. We ran into problems with the "unknown established"
security enhancement. I tried modifying fwui_head.def, and also objects.C
as
described in skI4308. I did NOT, try the HF2 approach, since the customer
uses AIX, and we were running out of time :-(

Environment:
Mgmt. Console: NG FP1/HF2 on NT 4.0
FireWall module: 4.1 sp5 on AIX 4.3.3

My questions are: Does anyone know if it is possible to disable this
feature in this
environment, and how do we do it? The instructions for HF2 in skI4308: do
we
have to set this variable on the management console or on the firewall
module itself? If firewall module: do either of the methods for Solaris or
Linux apply for AIX? If not; how do we do it?

regards,
Ketil Adolfsen
Allianse netpartner as

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================