Agreed, I tend to take the "ain't broken, don't fix it" approach to a lot of things, but security patches aren't that simple. And the release notes often make general statements like "improved stability". Well who doesn't want that? :-)
Specifically HFA-06 talks a lot about ClusterXL stability/performance improvements, and Solaris stability fixes. I am running ClusterXL on Solaris, with no specific problems at the moment, but those general statements make me think I should apply the HF. Thanks alll... Shane On Tue, 10 Aug 2004 14:02:52 -0400, Ray <[EMAIL PROTECTED]> wrote: > This is my approach as well but I don't let things get too far behind. We > all know how things get slipstreamed in without making it to the release > notes. > > As fas as "if it ain't broke, don't fix it", this is the reason I have done > assessments on companies where their routers are on the original IOS, > workstations and servers are on Windows Service Pack nothing, SQL Server > likewise, etc. The one admin said point blank that she never patches > anything that's working. > > Kind of the reason why they got taken down by Slammer and why they had to > set up weekly reboots on all servers to keep them stable. > > Ray > > > > >Well maybe it's just me, but I follow the "if it ain't broke > >don't fix it" approach. But always watch the release notes > >on fixes in case something serious may come up that may effect > >your stability or security. > > > >just my $.02 > > > >Hal > > > > > -----Original Message----- > > > From: Shane Presley [mailto:[EMAIL PROTECTED] > > > Sent: Tuesday, August 10, 2004 8:20 AM > > > To: [EMAIL PROTECTED] > > > Subject: [FW-1] Approach to hot fixes? > > > > > > > > > Just curious... > > > > > > Do you regularly keep your firewalls up to date with the Check Point > > > hot fixes? Or do you wait for the need? For example I'm currently on > > > HFA-04, but HFA-08 is out. I've read the release notes on HFA-08 and > > > don't see anything that would immediately impact me, so I don't think > > > there's a pressing need to put HFA-08 on it. > > > > > > But is it a "best practice" to always apply the latest HFA? > > > > > > Shane > > > > > > ================================================= > > > To set vacation, Out-Of-Office, or away messages, > > > send an email to [EMAIL PROTECTED] > > > in the BODY of the email add: > > > set fw-1-mailinglist nomail > > > ================================================= > > > To unsubscribe from this mailing list, > > > please see the instructions at > > > http://www.checkpoint.com/services/mailing.html > > > ================================================= > > > If you have any questions on how to change your > > > subscription options, email > > > [EMAIL PROTECTED] > > > ================================================= > > > > > > >================================================= > >To set vacation, Out-Of-Office, or away messages, > >send an email to [EMAIL PROTECTED] > >in the BODY of the email add: > >set fw-1-mailinglist nomail > >================================================= > >To unsubscribe from this mailing list, > >please see the instructions at > >http://www.checkpoint.com/services/mailing.html > >================================================= > >If you have any questions on how to change your > >subscription options, email > >[EMAIL PROTECTED] > >================================================= > > _________________________________________________________________ > Express yourself instantly with MSN Messenger! Download today - it's FREE! > hthttp://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ > > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
