NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Cannot Install Policies on Nokia IP71


  • To: [email protected]
  • Subject: Re: [FW-1] Cannot Install Policies on Nokia IP71
  • From: Tim Holman <[email protected]>
  • Date: Thu, 10 Oct 2002 11:59:36 +0100
  • Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
  • Sender: Mailing list for discussion of Firewall-1 <[email protected]>
  • Thread-index: AcJYTwhJbv9PhS8LRdibxmLsmb8cmgX/MLcA
  • Thread-topic: Re: [FW-1] Cannot Install Policies on Nokia IP71

Title: RE: [FW-1] Cannot Install Policies on Nokia IP71
(fw putlic refers to the Check Point license.  You don't need the management license for the IP71, unless you plan to use the Small Office management server.)
 
 -----Original Message-----
From: Kelly Sedik [mailto:[email protected]]
Sent: 09 September 2002 22:06
To: [email protected]
Subject: Re: [FW-1] Cannot Install Policies on Nokia IP71

OK, here's the stupid question. When you're talking about using the fw putlic command what license is that? I got a license for the management module and a license for the CheckPoint that I applied using the wizard on the IP71. In fact, I just got off the phone with my var and the sales guy doesn't know what license I am asking about (Tech guys cost money to talk to). So how do I get an fw license? Thanks for your help so far (esp. that bit about firmware 1.5).
 
Kel
-----Original Message-----
From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of O'Brien, James
Sent: Monday, September 09, 2002 8:15 AM
To: [email protected]
Subject: Re: [FW-1] Cannot Install Policies on Nokia IP71

I've also had problems with IP71s, we've deployed a few and have had issues with the firmware as well.  Release 1.1 supports NG, but 1 does not while 1.5 seems pretty buggy and had to be removed when we tried it.  Also, after you run the wizard, you may want to run fw putlic and manually enter the license as well.  I've always had to run it after the wizard, it seems to do the IP stuff well, but the licenses you enter in the wizard don't always show up if you do a printlic.

-----Original Message-----
From: Tim Holman [mailto:[email protected]]
Sent: Monday, September 09, 2002 5:19 AM
To: [email protected]
Subject: Re: [FW-1] Cannot Install Policies on Nokia IP71

If you're running IP71 firmware 1.0, and are managing with Check Point
NG, you need to up the firmware to at least 1.1, physically reset the
box (paperclip in the hole at the back), reconfigure, and then you'll be
able to get a policy onto it, as per Nokia res 12761.
Otherwise, have you done the putkeys ?  ie - go to CPCONFIG on the
managament station, add the IP71 as a remote module, then run WIZARD on
the IP71 and define the management station as the master.
Also, double check the IP address in the interfaces tab matches up with
both the primary IP address (in the general tab), and the licensed IP
address (view with cplic print / fw printlic)

Regards,

Tim


-----Original Message-----
From: Kelly Sedik [mailto:[email protected]]
Sent: 03 September 2002 22:26
To: [email protected]
Subject: [FW-1] Cannot Install Policies on Nokia IP71


I have the CP Management tools installed on a Win2k machine (no SPs).
When I
try to install a rule I get:

Authentication for command load failed.
Failed to Download Security Policy on IP71: Unauthorized action.

In the CP Systems Status it shows the VPN-1 and Firewall-1 as Untrusted.

In the Event Viewer I get "Warning. Cannot locate my Network Object"
from
the firewall.

No errors are recorded in the firewall logs.

I have set the firewall and the CheckPoint clients to use the same
username
and password. Any help would be greatly appreciated.

Kel

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
Dimension Data mail system for the presence of computer viruses.

www.uk.didata.com
**********************************************************************

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.