To be verified : module hostname and IP should match object hostname and IP in the management.
JF On Wed, 7 Apr 2004, Kingsley Chu wrote: > Dear All, > > I had a problem on "fetch floodgate policy", when I run "CPSTART", I will > get the following error (fetch QOS policy failed): > > Installing Security Policy xxxx_policy on [EMAIL PROTECTED] > Fetching Security Policy from localhost succeeded > > Fetching Securuity Policy From: 10.0.0.1 > > FloodGate-1: Loading - FloodGate-1 > > FloodGate-1: Loading Kernel module... > FloodGate-1: Starting fgd50 > > FloodGate-1: Fetching QOS Policy from localhost > Fetching FloodGate-1 QOS Policy: > Management rejected fetch for this module - sic name does not match. > Fetch failed: connection failed - END_BY_APPLICATION > Failed to Fetch QOS Policy. > > Failed to fetch QOS Policy. > FloodGate-1 Stated > > My troubleshooting and verification: > > Due to this symptom, I check the SIC , but I make sure that it is not caused > by SIC problem. Because, when I run "fgate fetch 10.0.0.1" command to fetch > QOS policy which was succeed and can be installed QOS policy (After Firewall > service started by "cpstart" command.) > > My environment is: > > a.. Management Console is a Provider-1 and CMA is using "invalid IP > address" and site in internal network > b.. Firewall Module is on other external network site > c.. Due to this scenario it will have a special NAT rule for External > Firewall module connect to Internal Management Console, the following is a > NAT rule on this external firewall module: > Original Source Original Destination > Translated Source Translated Destination > -------------------------------------------------------------------- > ------------------------------------ > External Firewall CMA (invalid IP) > =original CMA (valid IP) > > (Unchecked "Translate destination on client side" at global > properties) > > > My question: > > Does anybody know that how to solve this problem? > > > > Thank you for your kind attention and I appreciate that if you can give me > any advice. > > Thank You, > > Kingsley > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ---------- Jean-Francois Gobin - Administrateur gobinjf.be http://www.gobinjf.be mailto:[EMAIL PROTECTED] ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
