We had some really strange SIC problems... basically we would lost them
randomly and nothing could never really pin it down. We tried a CA rebuild
(suggested fix) and this did not fix it... escalated it to Checkpoint but
this was taking too long.
1) check all your enforcement are on the same patch levels, etc.
2) ensure you have NTP synching time on everything
If the above has no resolution....
In the end we just rebuilt the management from scratch... we have had no
issues since.
BR
Robert Rutherford
|---------+-------------------------------------------->
| | roberto fregoni <[EMAIL PROTECTED]> |
| | Sent by: Mailing list for |
| | discussion of Firewall-1 |
| | <[EMAIL PROTECTED]|
| | KPOINT.COM> |
| | |
| | |
| | 10/03/2003 08:05 |
| | Please respond to Mailing list |
| | for discussion of Firewall-1 |
| | |
|---------+-------------------------------------------->
>----------------------------------------------------------------------------------------------|
|
|
| To: [EMAIL PROTECTED] |
| cc:
|
| Subject: [FW-1] SIC Problem
|
>----------------------------------------------------------------------------------------------|
Hi all,
I was thinking to have solved my problem but it isn' so. Everytime I
perform an upgrade I have a SIC problem and everytime I solve it in a
different way. Last time I had to delete the enforcement object from the
policy and create it again completely.
Now I have two fw, a managment and an enforcement, on solaris 8, I
upgrade from FP1 to FP3 and the enforcement module appears as
disconnected, and on the communication tab is "Initialized but trust not
established".
I have already made a cpconfig->SIC reset on the enforcement module
followed by "Initialize" command on GUI, created again in the policy the
enforcement module (extrema ratio I thought !), ran a fwm sic_reset on
the managment, but there's no way to establish a trust communication
between the two fw.
Is there anybody out there that has any idea ? I don't know to think
about a so expensive product that performs different behaviors on the
same situation.
Regards
robi
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
********************************************************************
This E-mail and any files transmitted with it are in
commercial confidence and intended solely for the use of
the individual or entity to whom they are addressed.
If you have received this E-mail in error please notify the
Administrator by E-mail ([EMAIL PROTECTED]).
Any views or opinions expressed are solely those of the
author and do not necessarily represent those of
DEK International., or its affiliates.
********************************************************************
This footnote signifies that this message has been
checked for viruses by MailswpUK1
********************************************************************
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
