[FW-1] IPSO upgrade

2007-02-15 Thread Nick Whitworth
Hi, I've just upgraded an IP265 from IPSO 3.9 build 41 to 4.0 build 30 and have now lost tcp/ip connectivity with the box. Via the console I can go into clish and view the interfaces info. I had configured eth3c0 for Voyager access previously but it now looks like this (why there is a smiley

Re: [FW-1] IPSO upgrade

2007-02-15 Thread Reinhard Stich
hi, is fw1 active? try to run cpstop. you can also run from the shell tcpdump -ni eth3c0 to see if you receive any packets on the box. maybe you have a problem with 10/100Mbit, full/half-duplex. br reinhard At 11:41 15.02.2007, you wrote: Hi, I've just upgraded an IP265 from IPSO 3.9

Re: [FW-1] R55: Certificates and Management behind NAT

2007-02-15 Thread Sascha Picchiantano
Thanks Rajeev, I got it all now, thanks to you :) Little Sascha is happy now! Cheers Sascha = To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail

Re: [FW-1] Bad Reply for Smartcenter

2007-02-15 Thread Bhavin Gandhi
Hi Rajeev, Thanks for the reply. But this message is for the SC Server only. All the modules are reporting proper status. No new FW's have been added. Anything else we can check for. Cheers, B -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL

Re: [FW-1] IPSO upgrade

2007-02-15 Thread Reinhard Stich
hi, you can reset the config by running rm /config/active and then reboot the box. it will start again by asking for hostname. br reinhard At 12:20 15.02.2007, you wrote: Hi Reinhard, Fw1 is not running. When I run tcpdump I get # tcpdump -ni eth3c0 tcpdump: /dev/bpf100: No such file or

Re: [FW-1] IPSO upgrade

2007-02-15 Thread pkc_mls
Nick Whitworth a écrit : Hi Reinhard, Fw1 is not running. When I run tcpdump I get # tcpdump -ni eth3c0 tcpdump: /dev/bpf100: No such file or directory # Any other ideas? Do you know how I can wipe the config so that I get back to the initial configuration prompts? rm /config/active

Re: [FW-1] IPSO upgrade

2007-02-15 Thread Paolo Riviello www.paoloriviello.com
hi, this look like you have lost the specialfile to access the kernel driver try to reboot first! Cheers -- From: Nick Whitworth [EMAIL PROTECTED] Reply-To: Mailing list for discussion of Firewall-1 FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM To:

Re: [FW-1] IPSO upgrade

2007-02-15 Thread Nick Whitworth
I have run rm /config/active and rebooted. During the setup, no interfaces appear to be configurable. Any ideas? How can I view the logs you are talking about? You can configure your system in two ways: 1) configure an interface and use our Web-based Voyager via a remote browser

Re: [FW-1] IPSO upgrade

2007-02-15 Thread pkc_mls
Nick Whitworth a écrit : I have run rm /config/active and rebooted. During the setup, no interfaces appear to be configurable. Any ideas? How can I view the logs you are talking about? You can configure your system in two ways: 1) configure an interface and use our Web-based Voyager via

Re: [FW-1] IPSO upgrade

2007-02-15 Thread cisco4ng
1) remove everything in the config directory 2) reboot 3) at the boot manager, type space bar and rebuild your box with the IPSO that you want. It is a much cleaner install, IMHO. Paolo Riviello www.paoloriviello.com [EMAIL PROTECTED] wrote: hi, this look like you have lost the specialfile to

Re: [FW-1] [SUSPECTED SPAM] Site to Site VPN and NAT-T

2007-02-15 Thread Paolo Riviello www.paoloriviello.com
Hi Andy, did you do it? how it works? Cheers Paolo From: André L. [EMAIL PROTECTED] Reply-To: Mailing list for discussion of Firewall-1 FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: [FW-1] [SUSPECTED SPAM] Site to

Re: [FW-1] R55: Certificates and Management behind NAT

2007-02-15 Thread Rajeev Gupta
I am equally happy to see li'l Sascha becoming Bigg now:-)! On 2/15/07, Sascha Picchiantano [EMAIL PROTECTED] wrote: Thanks Rajeev, I got it all now, thanks to you :) Little Sascha is happy now! Cheers Sascha = To set vacation,

Re: [FW-1] Bad Reply for Smartcenter

2007-02-15 Thread Rajeev Gupta
Bhavin, 'Bad reply' fundamentally points to a misconfiguration as I stated in my earlier message - if the message appears under any object, please check to ensure it is configured correctly in SmartDashboard vs what is actually installed/licensed on it. So, you mean the object under which you

Re: [FW-1] IPSO upgrade

2007-02-15 Thread Nick Whitworth
Hi, This doesn't work, I deleted everything in the config directory. When I run install I get the problem below: Client IP address = 10.x.x.x/24 Server IP address = 10.x.x.x Default gateway IP address = 10.x.x.x Network Interface = , speed = , -duplex Server download path = [./] Package

Re: [FW-1] IPSO upgrade

2007-02-15 Thread cisco4ng
Please IPSO 4.1 build 22. It will work for you. Nick Whitworth [EMAIL PROTECTED] wrote: Hi, This doesn't work, I deleted everything in the config directory. When I run install I get the problem below: Client IP address = 10.x.x.x/24 Server IP address = 10.x.x.x Default gateway IP address =

Re: [FW-1] IPSO upgrade

2007-02-15 Thread Paolo Riviello www.paoloriviello.com
it look like if you dont have any driver or specialfile to drive it...so just follow cisco4ng.. cheers Paolo From: cisco4ng [EMAIL PROTECTED] Reply-To: Mailing list for discussion of Firewall-1 FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM To:

Re: [FW-1] IPSO upgrade

2007-02-15 Thread Nick Whitworth
I can't do this as the company policy is for all firewalls to be running the same version of IPSO and CheckPoint. We have 20+ firewalls on NGX R60 and IPSO 4.0 build 30. -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of cisco4ng

Re: [FW-1] IPSO upgrade

2007-02-15 Thread pkc_mls
Nick Whitworth a écrit : I can't do this as the company policy is for all firewalls to be running the same version of IPSO and CheckPoint. We have 20+ firewalls on NGX R60 and IPSO 4.0 build 30. and all are the same hardware revision ? all are flash based with the same flash revision ?

Re: [FW-1] communicate between two office mode clients

2007-02-15 Thread Robby Cauwerts
On 2/15/07, pkc_mls [EMAIL PROTECTED] wrote: Hi all, could anyone tell me (I suspect the answer is no ...) if it is possible to set a vpn gateway so the office mode clients could be able to cummunicate with each other ? Yes this is possible. Take a look at the vpn guide under vpn routing -

Re: [FW-1] IPSO upgrade

2007-02-15 Thread Hugo van der Kooij
On Thu, 15 Feb 2007, Nick Whitworth wrote: I can't do this as the company policy is for all firewalls to be running the same version of IPSO and CheckPoint. We have 20+ firewalls on NGX R60 and IPSO 4.0 build 30. Lovely. So you options are: 1. Blindly follow the company policy and let you

Re: [FW-1] R55: Certificates and Management behind NAT

2007-02-15 Thread Sascha Picchiantano
Rajeev, little Sascha came back to me and said wait, I have another question. Can you ask Master Rajeec about it? ;) So here is this one more little question: If the enforcement module has one public IP address bound to the external interface and they are using hide NAT to hide their

Re: [FW-1] R55: Certificates and Management behind NAT

2007-02-15 Thread Hugo van der Kooij
On Thu, 15 Feb 2007, Sascha Picchiantano wrote: If the enforcement module has one public IP address bound to the external interface and they are using hide NAT to hide their internal network behind that IP, can they still use that very same IP for one static IP mapping (obviously pointing to

Re: [FW-1] R55: Certificates and Management behind NAT

2007-02-15 Thread Rajeev Gupta
The Big Sascha is becoming a Guru now:-)! Well, believe me I am no Master but thanks any ways for your kindness, Sascha. Let us attempt to understand: The external IP of the firewall can not be used for 'static, *one to one* NAT (classically, it remains no more a 'one to one', right? - we need