Hi Chris, thanks, for the hint. After reading the error file i found the problem. The reason why it installing the policy on the edge box does not work was, that edge box has problems if there is a nat rule with a fw cluster objaect as hide nat address. The interessting thing is, that there is no message during policy verification and that none of the nat rules has the edgebox as installation target.
regards Christian -----Urspr�ngliche Nachricht----- Von: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] Auftrag von Chris Hoff Gesendet: Montag, 9. Februar 2004 17:35 An: [EMAIL PROTECTED] Betreff: Re: [FW-1] Edge Box: failed to intall updated security policy You can try looking in the $FWDIR/FW1_4.1_BC/tmp directory on the SmartCenter Server for an error log file. This may give you more information. Are you able to push the policy on the SmartCenter Server. I know this actually just creates a .pf file that is stored on the SmartCenter server, but I was having an issue even doing this and the error log was actually helpful. Regards, Chris -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Christian Herterich Sent: Monday, February 09, 2004 10:57 AM To: [EMAIL PROTECTED] Subject: [FW-1] Edge Box: failed to intall updated security policy hello, i configured a vpn-1 edge box to be managed by my r55 smartcenter. the edge box can register to the smartcenter as service center. the edge box logs to the smartcenter but if i force the edge box to get the new policy it does not work. Event log only tells "failed to install updated security policy" does anyone know where the problem can be. Maybe the edge box has a problem, that smartcenter is behind static nat. thanks Christian ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
