That really answered my question. Thanks Stich and Ray.
I am weighting whether to use 3.8 or 3.8.1. I got a very strang thing with
3.8.1. After installed R55 for 3.8, VRRP got screwed up. All interfaces of
both members of HA pair are in standby state. If I removed R55, than VRRP is
normal again. If I use 3.8, then VRRP is fine after installed the same R55.
Anyone else has this experience ?
----- Original Message -----
From: "Ray" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, June 09, 2005 7:36 PM
Subject: Re: [FW-1] IPSO code explaination
I concur with your explanation. When 3.7.1 came out, I queried Nokia on
what the difference was between 3.7 and 3.7.1. They really couldn't answer
it. From the notes, it appeared that all it did was include some new
drivers for newer hardware and they continued to maintain the two code
bases. This may be a concession to their users who can easily go to new
builds but might have a political problem going to a new version, even if
it is just a .1 release.
Wasn't 3.8 required for R55P? I guess 3.9 for NGX is supposed to be out
within a month.
Ray
From: Reinhard Stich <[EMAIL PROTECTED]>
Reply-To: Mailing list for discussion of Firewall-1
<[email protected]>
To: [email protected]
Subject: Re: [FW-1] IPSO code explaination
Date: Fri, 10 Jun 2005 01:08:32 +0200
hi,
this is not official but what I have seen within the last years:
new major-release (ipso 2 -> ipso 3):
very big changes
new minor-release (ipso 3.7 -> ipso 3.8):
new features
new sub-release (ipso 3.8 -> ipso 3.8.1):
new drivers, no new "features", just changes in existing features
support for new version of software (fw1)
new build (ipso 3.8.1 build 13 -> ipso 3.8.1 build 15):
bug fixes
normally you install new ipso-versions because because
* you need the new features
* the new fw1-version requires this ipso-version
* a behavior that you don't like is changed there
cheers
reinhard
At 00:56 10.06.2005, you wrote:
I am not interested in know what are the new features in 3.8.1 or in any
other IPSO code. I am interested in knowing why there is 3.8 also 3.8.1.
For example, what 3.x means and what 3.x.1 means. In the other way, in
cisco code which I know, they have 12.2, also 12.2.xT. The former is a GD
code, the later is a testing code.
Hope I make myself clear this time.
----- Original Message ----- From: "Carole Berger" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, June 09, 2005 12:05 PM
Subject: Re: [FW-1] IPSO code explaination
Basically, this is the new feature for IPSO 3.8.1, I do not check if it
is
correspond to the new feature of 3.7.1 but I think this should be
different.
All detailed are in the complete release notes of IPSO 3.8.1 which can
be
download on the nokia web site if you have access to download IPSO or
ask
your partner to send this release to you...
What's New in Nokia IPSO 3.8.1
?? Support for Nokia IP265 and IP260 Platforms
?? Link Aggregation
?? SecureXL Enhancements
?? RIP in a VRRP Environment
?? IP Clustering Support for PIM
?? VRRP for IPv6 Interfaces
?? Support for New Nokia Encrypt Cards
?? APC Simple Signaling Daemon (SSD)
?? Configuration Summary Tool
IPSO 3.8.1 includes the following fixes that were previously implemented
in
IPSO 3.8 build 039 and earlier:
?? Fix for Denial of Service Vulnerability
?? Fix for http Log Vulnerabilities
?? Fix for BGP Vulnerabilities
?? Fix for Upgrading IPSO on an IP2250
?? Fix for DHCP Server Vulnerability
?? Fix for Deleting Packages on an IP2250
?? Fix to savecore Command for IP2250
?? Fix for IPSO Kernel Crash
?? Fixes for Hard Disk Failures
?? Fix for Incorrect NoDiskSpace Trap
?? Fixes for Gigabit Ethernet
?? Fix to New Image Command on IP2250 Platform
?? Fix for VRRP When Running Nokia Secure Access System
?? Fix for OSPF Area Address Range
?? Fix for OSPF Router ID
?? Fix for Interoperability with Cisco Routers Running OSPF
?? Fix for Network Voyager Connection Problem
?? Fault Management Not Supported
Hope it helps....
Carole Berger
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
--
Reinhard Stich ASSIST [EMAIL PROTECTED]
Internet Security AG, 1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
