>From [EMAIL PROTECTED] Wed Nov 29 02:15:58 2000 -0600
Status:
X-Status:
X-Keywords:
Date: Wed, 29 Nov 2000 02:15:43 -0600 (CST)
From: Chris Tobkin <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
cc: [EMAIL PROTECTED]
Subject: Re: policy vs. rulebases.fws
In-Reply-To: <[EMAIL PROTECTED]>
Message-Id: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
> What is the difference between a policy and the rulebases.fws file ? Does
> the rulebases.fws file contain all the policies ? Because when I look at
> the firewall ruleset on the management console it matches back to the
> current policy and doesnt have all the rulebases.fws rules.
The rulebases.fws file contains information on all the policies that the
management station knows about. This is what file the GUI client
loads. When the policy is saved, it updates the rulebases.fws and
objects.C files, saves a copy as <policy>.W then compiles <policy>.W into
<policy>.pf. The <policy>.pf file is then downloaded to the firewall and
installed. You can rebuild the rulebases.fws file from the <policy>.W
file -- Information on how to do it can be found at:
http://www.intersec.com/support/checkpt/40.htm#r_q1
In addition, you can take the rulebases.fws and objects.C files, copy them
off to another machine, and view them in the GUI without logging into the
management station. Information on how to do this is available at:
http://www.intersec.com/support/checkpt/40.htm#r_q4
// Chris
[EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
