I don't think this will work. I know when I went from NG FP3 to NGAI I was told it wouldn't state sync once the versions differed. Note: I did not test it. I just upgraded one of the boxes, and then load balanced to it, let it run that way for a few days, and then took down the other one and upgraded it.
Derek O'Flynn -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Crist Clark Sent: Thursday, November 18, 2004 6:30 PM To: [EMAIL PROTECTED] Subject: [FW-1] State Sync Between FW-1 Versions I know that state synchronization between different versions of FW-1 is not supported. However, that does not necessarily mean that it won't work between very similar versions. I am going to be upgrading a failover pair from FW-1 NG FP2 to FW-1 NG AI does anyone know from experience whether these two versions can state sync? There are long-lived TCP connections over the pair that it would be nice to not have to break. Enabling fw_allow_out_of_state_tcp is only a partial fix since we have to see something go from inside out before it is turned back off. -- Crist J. Clark [EMAIL PROTECTED] Globalstar Communications (408) 933-4387 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
