NG FP1 on the Nokia 100 series is buggy.
If you got to the Nokia Support Site, it suggests waiting until FP2 and IPSO
3.5. I Checkpoint FP1 on Nokia seems buggy. The firewall Commands are
slow. Someone from Checkpoint acknowledged that this is a problem and FP2
and IPSO 3.5 should resolve it.
James
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On
Behalf Of Ralph Los
Sent: Friday, April 26, 2002 12:26
PM
To: 'simon chan';
[EMAIL PROTECTED]
Subject: RE: ip120 crash or hang
2 things:
1. Read your logs and see if they tell you what happened
2. Set up some sort of monitoring package to check uptime on the
firewall
..all else fails, reboot!
...some standard stuff - but it should get you working
again. I've worked with a bunch of IP120's and for what it's worth, I've
never seen one hang/die like that without at least giving an idea in the logs
of what happened.
Regards,
Ralph
-----Original Message-----
From: simon chan [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 26, 2002 7:48
AM
To: [EMAIL PROTECTED]
Subject: ip120 crash or hang
Hi Fw list,
got a call from the users that they could surf the net
or retrieve their emails.
I checked and found my nokia ip 120 (on NG fp1) hang /
freezes /crash this morning.
I wasn't able to ssh, https to the box.
OK I panic and rebooted the box and the connection
resume.
What should I do if this happens again and find out
why ?
tks.
Rgds,
Simon
On 26 Mar 2002 17:05:01 +0200
Iain King
<[EMAIL PROTECTED]> wrote:
> *This message was transferred
with a trial version of
> CommuniGate(tm) Pro*
> Hi,
>
On the contrary.. it will work, but is not a good idea.
> And as
>
such it is not supported by Nokia
>
> BR,
>
Iain
>
> > On Tue, 2002-03-26 at
19:34, ext Simon Chan wrote:
> > > Hi Ralph,
> > >
> > > we understood from
our Nokia Distributor that you can
> either use the Box as a FW1 or
a network sensor only, not both.
> > >
> > > Rgds,
> > >
> > > Simon
> > >
> > >
> > > -----Original
Message-----
> > > From:
[EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On
Behalf Of Ralph
> Los
> > > Sent: Monday,
March 25, 2002 8:51 AM
> > > To:
[EMAIL PROTECTED]
> > > Subject:
Question for CheckPoint/Nokia admin
> > >
> > >
> > >
> > > Hey all,
> > >
Curious to see if anyone's got this
type of
> setup working:
> > >
> > > - Nokia IPxxx
platform running some version of
> CheckPoint (>4.1 sp3)
> > > - Either
proprietary, open source, or retail
> software package on the same
BOX?
> > >
> > >
For example, the one off the top of
my head
> that comes to mind fastest is
running some sort fo IDS on
> the same box as the
Nokia/CheckPoint firewall-1.
> > >
> > >
My purpose is to take the client
hardware
> and maximize the usage for the
least amount of hardware purchase.
> Please don't preach about
single-point of failure...I fully understand
> that...what I'm trying to do
is get folks who have 'no money to spend
> on security' and give them the
most for the least money.
> > >
> > > Example:
> > >
Nokia IP 330
> > >
- CheckPoint FW-1 (NG) running
> > >
- ISS RealSecure (or something
> similar?) running
> > >
> > > Would this
cause a resource conflict with promisc
> mode? Does the
CheckPoint force-bind itself to EACH NIC
> that is on the box? (haven't
tested voyager to this
> extent yet)....
> > >
> > > Thoughts are
apreciated, either on-list
> personally...
> > >
> > >
----------------------------------------|
> > > Ralph M. Los
> > > Sr. Security
Engineer and Trainer
> > >
EnterEdge Technology,
L.L.C.
> > >
[EMAIL PROTECTED]
> > >
(770) 955-9899 x.206
> > >
----------------------------------------|
> > >
> >
>
> _______________________________________________
> Firewalls mailing list
> [EMAIL PROTECTED]
> http://lists.gnac.net/mailman/listinfo/firewalls
"Fanaticism consists in redoubling your efforts
when you
have forgotten your
aim."
-George Santayana, Philosopher
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
For Account Management
(unsubscribe, get/change password, etc) Please go to: http://lists.gnac.net/mailman/listinfo/firewalls
