After FW01 gets updated, should I install the policy to FW01, 02 and 03?
(their code is still at HF04 or whatever it is at this point...), will that
be OK to do?
Yes, you must always update the SmartCenter first and after it reboots push
the policy to the enforcement modules. A SmartCenter can handle its own rev
level or lower.
Now the instructions say to Use Smartupdate/smartconsole. I've never used
smartupdate. Is this the only method to push the code out to FW02 and FW03?
Or can I simply co-ordinate with someone at the remote sites, send them
the HF15 CD and install it locally using installhfa.bat???
If you can get to the enforcement module remotely, say via SSH or TS, you
can copy the HFA file over so it's physically on the enforcement module and
run it remotely. That's what I do on my Nokia boxes even though I have
SmartUpdate available. Or ship a CD if you're OK with giving them the
password to the enforcement module.
What do they mean "installation hfa15 should be made to a single package at
a time"?
I don't know, I never understood it either.
Make darn sure you have a backup of your SmartCenter before you do anything.
If you're not aware of it, it is impossible to recover the policy and
objects from an enforcement module and rebuild your SmartCenter. I always
run an upgrade_export before I do anything in addition to imaging the
SmartCenter, but mine is not also an enforcement module.
Good luck! (I've never had one go wrong yet).
Ray
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
