Re: [FW-1] Upgrade with a flush install from R70 to R75.20

2011-12-13 Thread a bv
Thanks Ray, As you said i have copied R75 (not R75.20) migration tools to the folder i created on the /var directory of the gateway i have to upgrade. I ran preupgrade verifier and it gava error about 2 custom IPS header rejection entries so i deleted them , the tool gives only Software Blade

[FW-1] A question about dynamic objects

2011-12-13 Thread carlopmart
Hi all, I am very confused about dynamic objects pourpose. According to this sk: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=solutionid=skI1915js_peid=P-114a7ba5fd7-10001partition=Generalproduct=Security, I need to configure every dynamic

Re: [FW-1] A question about dynamic objects

2011-12-13 Thread Alexey Baltacov
You should use domain object instead. Dynamic objects used for edges dynamic policy On Dec 13, 2011 9:33 PM, carlopmart carlopm...@gmail.com wrote: Hi all, I am very confused about dynamic objects pourpose. According to this sk:

Re: [FW-1] A question about dynamic objects

2011-12-13 Thread carlopmart
On Tue, 13 Dec 2011, Alexey Baltacov wrote: You should use domain object instead. Dynamic objects used for edges dynamic policy Thanks Alexei, but can I use domain objects to resolve hostnames unde rules?? Thanks. --- CL Martinez carlopmart {at} gmail {d0t} com

Re: [FW-1] A question about dynamic objects

2011-12-13 Thread Alexey Baltacov
Hi. The domain objects are used to resolve hostnames in rules. It's also not recommended to use such objects in beginning of rulebase because it can hardly affect the perfomance. In order to use it you should configure DNS servers on OS level. Please use nearest DNS's as possible (located in

Re: [FW-1] A question about dynamic objects

2011-12-13 Thread C. L. Martinez
Uhmm ... It doesn't works, because smtp.gmail.com is resolved as a wi-in-f108.1e100.net Then, do I need to create another domain object with 1e100.net domain?? If it yes, I prefer to use IP's, although some alerts are triggered ... On Tue, Dec 13, 2011 at 9:16 PM, Alexey Baltacov

Re: [FW-1] A question about dynamic objects

2011-12-13 Thread Independent IT Consultant
What exactly are you trying to do? Domain objects work (even with cnames), but are *VERY* resource intensive. There is *NO* caching done, so *EVERY* new session will require a new lookup. For services like GMAIL, this may become problematic. This is why CP strongly advocates that any rules