The Nokia release notes for NG AI R55 state in red letters that IPSO 3.7.1 is not supported with R55. You have to use IPSO 3.7 build 32. I would suspect this limitation also applies to R54 since it pre-dated 3.7.1
Prior to the release of R55 I put in a Nokia support call on this issue and was told that I could use 3.7.1 or 3.7 build 32 with R54, but this was right after 3.7.1 was released. I didn't have time to install 3.7.1 and then R55 was released with the above referenced note.
I've never tried installing a new, lower rev of IPSO but it looks like that might be the problem. Better call Nokia and ask them.
Ray Pesek, CISSP
From: Luque Quiroga Federico <[EMAIL PROTECTED]> Reply-To: Mailing list for discussion of Firewall-1 <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [FW-1] Date: Fri, 30 Jan 2004 12:22:28 +0100
Hi,
We had the following configuration:
Two Nokia IP380 boxes with VRRP, IPSO 3.7.1 and NG AI R54 and the management on Windows 2000 Server with NG AI R54. We had to enter CPCONFIG and activate the "Enable Checkpoint Cluster XL and State Synchronization" and the "Would you like to enable the High Availabilty module" options and the firewall and VPN worked fine.
The problem begun when we upgrade the Checkpoint to NG AI R55 on both Nokia IP 380 boxes and the management. The VPN stop responding and we got an "Error Communicating with Gateway" message on all VPN clients. The firewall functions kept working fine. If we turn off one of the Nokia IP380 boxes the VPN starts working again.
Thanks in advance,
Regards,
Federico
******************AVISO LEGAL******************
Este mensaje es privado y confidencial y solamente para la persona a la que va dirigido. Si usted ha recibido este mensaje por error, no debe revelar, copiar, distribuir o usarlo en ningun sentido. Le rogamos lo comunique al remitente y borre dicho mensaje y cualquier documento adjunto que pudiera contener. No hay renuncia a la confidencialidad ni a ningun privilegio por causa de transmision erronea o mal funcionamiento. Cualquier opinion expresada en este mensaje pertenece unicamente al autor remitente, y no representa necesariamente la opinion de Santander Central Hispano, a no ser que expresamente se diga y el remitente este autorizado para hacerlo. Los correos electronicos no son seguros, no garantizan la confidencialidad ni la correcta recepcion de los mismos, dado que pueden ser interceptados, manipulados, destruidos, llegar con demora, incompletos, o con virus. Santander Central Hispano no se hace responsable de las alteraciones que pudieran hacerse al mensaje una vez enviado. Este mensaje solo tiene una finalidad de informacion, y no debe interpretarse como una oferta de venta o de compra de valores ni de instrumentos financieros relacionados. En el caso de que el destinatario de este mensaje no consintiera la utilizacion del correo electronico via Internet, rogamos lo ponga en nuestro conocimiento.
******************DISCLAIMER****************** This message is private and confidential and it is intended exclusively for the addressee. If you receive this message by mistake, you should not disseminate, distribute or copy this e-mail. Please inform the sender and delete the message and attachments from your system. No confidentiality nor any privilege regarding the information is waived or lost by any mistransmission or malfunction. Any views or opinions contained in this message are solely those of the author, and do not necessarily represent those of Santander Central Hispano, unless otherwise specifically stated and the sender is authorised to do so. E-mail transmission cannot be guaranteed to be secure, confidential, or error-free, as information could be intercepted, corrupted, lost, destroyed, arrive late, incomplete, or contain viruses. Santander Central Hispano does not accept responsibility for any changes in the contents of this message after it has been sent. This message is provided for informational purposes and should not be construed as a solicitation or offer to buy or sell any securities or related financial instruments. If the addressee of this message does not consent to the use of internet e-mail, please communicate it to us.
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
_________________________________________________________________ Let the new MSN Premium Internet Software make the most of your high-speed experience. http://join.msn.com/?pgmarket=en-us&page=byoa/prem&ST=1
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
