Re: [FW-1] Only secondary enforcement point in Firewall Cluster i s logging t o SmartCenter

[Rodrigo Borges <rborges@FW1-NOSPAMSIA.PT>]

Hi,

I've had a similar problem and removing the firewall object and recreating
it worked for me.

I supose you are using the original objects form 4.1...

|2|3

-----Original Message-----
From: John Beal
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Sent: 26/2/2003 22:14
Subject: [FW-1] Only secondary enforcement point in Firewall Cluster is
logging t o SmartCenter

Hi list,



We are migrating our Checkpoint firewalls from FW-1 4.1 stand-alones
(VIG-U) to NG enforcement points (VFM-U) reporting to a SmartCenter
(EMC).  Our SmartCenter console is a Dell 1650 running Checkpoint
NG-FP3.  The firewalls we are having trouble with are two Nokia IP440's
running Checkpoint FW-1 version 4.1-SP6.  Both IP440's are setup in a
Firewall Cluster using Nokia VRRP.  These Nokia's have been re-licensed
from stand-alone devices (VIG) to enforcement points (VFM-U).  We
initially had a problem setting up putkey's between the IP440's and each
box had intermittently refused to accept policy pushes from the Dell
SmartCenter management console.  After fixing these problems (having
putkeys finally accept), one problem has arisen.  The secondary IP440 is
logging to the SmartCenter while the primary IP440 is not logging
traffic.



We have taken this problem to the Checkpoint Engineer of our VAR (and
his subsequent Checkpoint contacts) and received little help.  Any help
the list can provide is appreciated.



Thanks,

John Beal, Network Engineer

Orcom Solutions, Inc.





NOTICE: This communication may contain proprietary or other confidential
business information of Orcom Solutions, Inc. If you are not the
intended recipient or believe that you may have received this
communication in error, please reply to the sender indicating that fact
and delete the copy you received. In addition, you should not print,
copy, retransmit, disseminate, or otherwise use the information. Thank
you.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================