I need to make sure what I'm doing so this doesnt mess up...
We have 3 firewalls, FW01, FW02, FW03 running NG-AI at HF04.
FW01 is the Management server, and also an enforcement point.
FW02 and FW03 are enforcement points (in different US states), we have VPN's
from FW02 and FW02 back to FW01 (headquarters).
All running under Windows.
Rulebase is configured out of FW01, and when the policy is installed I
tickmark FW01, FW02 and FW03 to push the policy out to them.
Now it's update time... I have this HF15 program code on CD. I assume I run
the "Install HFA.bat" on the CD at the FW01 firewall and it will update it's
base code.
After FW01 gets updated, should I install the policy to FW01, 02 and 03?
(their code is still at HF04 or whatever it is at this point...), will that
be OK to do?
Now the instructions say to Use Smartupdate/smartconsole. I've never used
smartupdate. Is this the only method to push the code out to FW02 and FW03?
Or can I simply co-ordinate with someone at the remote sites, send them the
HF15 CD and install it locally using installhfa.bat???
What do they mean "installation hfa15 should be made to a single package at
a time"?
Thanks for some help to basic questions...
Vic
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
