[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] Change Management Console NG FP2
hmmm... You have an NG-mgmt that you wan't to change.
Please this is my best practice i might be wrong.
1. Install NG packet on the new MGMT.
2. $FWDIR/lib
$FWDIR/conf
Are very important if and only if you have changed definitions in
the libs otherwise you can reconfigure your MGMT.
3. fwm -g bla.W your policy or the polcies of the rest of the
enforcement modules.
4.you have to reset SIC communication on enforcement modules
this is done on cpconfig on each enforcement checkpoint.
Note: prior to NG. it might be time consuming with putkeys and stuff
on NG it is automatic. Just reset on enforecement and initiate on MGMT.
5. You push your old policies to the enfocement points.
Note if you have changed defaults in properties you have to reconfigure.
PF-modules have to be reconfigured after intiation of SIC.
This is my best practice the whole operation would take about an hour.
Cheers
//Sadir
Andrade Guerra, Marcelo wrote:
Hi Gurus, I need change hardware for machine with management console, I
backup conf and lib directory but i cant sincronize new console with
Firewall Modules again, If i Rollback the primary console machine
sincronization is ok.
I need procedure "Disaster Recovery for Management Console in GN FP2"
Thanks Gurus.
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
