Re: [FW-1] NG FP3 Policy Fetch Fails

[Ramakrishnan Pillai <rpillai@FW1-NOSPAMCHARLESTONCOUNTY.ORG>]

I am having a similar problem of Logging from NG FP2 module to NG FP2
management server.  I am able to install policy to the module.  While
starting the module says unable to find masters in masters file.  But
the master file ip is correct.  Also there is no masters option in
cpconfig which used to be there in the earlier version.  Note that this
problem is after upgrading from 4.1 SP5 to NG FP2.  If any have a
solution let me know.

Thanks in advance.
Rdgs,
RK

>>> Philip.Hayward@DIGITALRUM.COM 02/08/03 12:37 PM >>>
If you can push policies to the NG firewall but remote logging and
fetching
isn't working you might want to check that the remote firewall is using
the
management's external IP and not the internal. If in doubt set it to use
its
local masters file and edit the file to show the management's external
IP.

If its still not working a cprestart might sort it.

Phil
-----Original Message-----
From: Janz, George [mailto:gjanz@ANTEON.COM]
Sent: 08 February 2003 12:17
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: [FW-1] NG FP3 Policy Fetch Fails


I have an NG FP3 mgmt server running behind a 4.1 SP-6 perimeter
firewall.

When a remote NG FP3 firewall attempts a fetch from the NG mgmt server
traffic, it fails with the message "No response from daemon".

4.1 SP-6 rule #1 is remote NG FW/NG mgmt server/any/allow.  I don't see
any
drops in the 4.1 logger or the NG logger.

NG mgmt server is nat'ed

Anyone experienced this?

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================