Greg, Thanks, Have tried all this, implied rules off/on etc, now the management and modules have rules to communicate on any service between one another.
-----Original Message----- From: Pendergrass, Greg [mailto:[EMAIL PROTECTED] Sent: Wednesday, 3 March 2004 4:56 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] SIC Error 147 What does smartview status tell you about the enforcement point? If it says there's a problem there may be some more information. Check to make sure you are allowing the CPD connections from the management station to the enforcement point. You may be allowing CPD from the enforcement point to the management server but not from the management server to the enforcement point. If you've disabled all your implied rules you may have failed to add this service in both directions. Your logs should be able to tell you if this is happening. Hope this helps GP -----Original Message----- From: Brendan Laws [mailto:[EMAIL PROTECTED] Sent: 02 March 2004 00:42 To: [EMAIL PROTECTED] Subject: [FW-1] SIC Error 147 Importance: High Hello People, Weird problem and I am wondering if anyone has seen this before HA Management, works fine, syncs etc, 2 certain nokia modules, all current IPSO and fw1 install NG AI r55 When firewall policy is unloaded from Nokia modules, management can verify SIC status, and install the policy. However once the policy is installed the management is unable to communicate with the module anymore. When you to to push a policy or test SIC status you get "SIC Error 147". But if I hope on locally to the nokia modules it is trying to push to and do an 'fw fetch mgmtip" it works fine, validating that SIC is working correctly. However the problem is that we can not manage the firewall from the management server. Unload the nokia module and we can test SIC again from the management and install our policy, but once pushed we can no longer communictae to the module and always get "SIC Error 147" for which I can find no information on Check Point site at all. So we can fw fetch mgmtip from the modules and it works fine, just not from the management. Has anyone seen this, does anyone no what SIC Error 147 is? Cheers, Brendan ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= Vodafone Global Content Services Limited Registered Office: Vodafone House, The Connection, Newbury, Berkshire RG14 2FN Registered in England No. 4064873 This e-mail is for the addressee(s) only. If you are not an addressee, you must not distribute, disclose, copy, use or rely on this e-mail or its contents, and you must immediately notify the sender and delete this e-mail and all copies from your system. Any unauthorised use may be unlawful. The information contained in this e-mail is confidential and may also be legally privileged. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
