You probably don't need to worry too much about the firewall module, as
the 'real' policies live on the management server.
Changed files in the lib and state directories are worth saving
(control.map, local.arp etc.)
If I'm upgrading an enterprise system and run into problems on the modules,
I simply re-install them from scratch at the new level and re-install the
(upgraded) policy from the manager.
Just my 2 pence.
Tom
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Friday, August 04, 2000 4:07 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [FW1] Which Connfiguration files do I Need
>
>
>
>
> Phoneboy's FAQ -- http://www.phoneboy.com/fw1/ -- lists
> the following
> files as those which need to be backed up/moved to restore or
> transfer a
> system. I have transfered my Firewall 1
> configuration/policies between
> Solaris 2.6 servers by moving these files. So in answer to
> your question,
> transfer any of these which are not already identical:
>
> On the mangement console, this is:
>
> $FWDIR/conf/fw.license
> $FWDIR/conf/objects.C
> $FWDIR/conf/*.W
> $FWDIR/conf/rulebases.fws
> $FWDIR/conf/fwauth.NDB*
> $FWDIR/conf/fwmusers
> $FWDIR/conf/gui-clients
> $FWDIR/conf/product.conf
> $FWDIR/conf/fwauth.keys
> $FWDIR/conf/serverkeys.*
>
> On the firewall module, this is:
>
> $FWDIR/conf/fw.license
> $FWDIR/conf/product.conf
> $FWDIR/conf/masters
> $FWDIR/conf/fwauth.keys
> $FWDIR/conf/product.conf
> $FWDIR/conf/smtp.conf
> $FWDIR/conf/fwauthd.conf
> $FWDIR/conf/fwopsec.conf
> $FWDIR/conf/product.conf
> $FWDIR/conf/serverkeys.*
>
> You should also modify any file you may have modified in
> $FWDIR/lib. If you
> are going to be upgrading, it is not wise to copy an older
> version of one
> of these files over a newer version. If you are running Windows NT and
> doing static address translation, also backup $FWDIR/state/local.arp.
>
>
> Matt Ruehlen
> Network Operations Supervisor
> ELF Technologies, Inc.
> Voice: 206 770 4034
> Fax: 206 728 5654
>
>
>
>
>
> "Robert Kuhlig"
>
>
> <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
>
> Sent by:
> cc:
>
> [EMAIL PROTECTED]
> Subject: [FW1] Which Connfiguration files do I Need
>
> kpoint.com
>
>
>
>
>
>
>
>
> 08/04/00 04:12 AM
>
>
>
>
>
>
>
>
>
>
>
>
> hi
> we are using two systems with a fw1 4.0 on a sun machine. they are
> identical
> except the different IP addresses.
> I have created a new rule base (old Objects) and passed an
> acceptance test.
> No I have to install the new rule base in the live system. Therefore I
> changed the IP addresses of all objects (after saving my old
> configuration
> files in the conf directory).
>
> My question is now which files do I have to copy to the live net conf
> directory.
>
> Only livent.W and (new) object.C ?
> Any others ?
> Any files in other directories then /conf ?
>
>
> Thanks for help
> Rob
>
>
> ==============================================================
> ==================
>
> To unsubscribe from this mailing list, please see the
> instructions at
> http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
>
>
>
>
>
>
>
> ==============================================================
> ==================
> To unsubscribe from this mailing list, please see the
> instructions at
> http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
>
Allasso
Theale House
Brunel Road
Theale, Reading
RG7 4AQ
+44 (0) 118 9711511
[EMAIL PROTECTED]
http://www.allasso.com
DISCLAIMER
Any opinions expressed in this email are those of the individual and not necessarily
the Company. This email and any files transmitted with it, including replies and
forwarded copies (which may contain alterations) subsequently transmitted from the
Company, are confidential and solely for the use of the intended recipient. It may
contain material protected by attorney-client privilege. If you are not the intended
recipient or the person responsible for delivering to the intended recipient, be
advised that you have received this email in error and that any use is strictly
prohibited.
If you have received this email in error please notify the IT manager by telephone on
+44 (0)118 9711511 or via email to [EMAIL PROTECTED], including a copy of
this message. Please then delete this email and destroy any copies of it.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
