Thanks Ray.
Vic
From: Ray <[EMAIL PROTECTED]>
Reply-To: Mailing list for discussion of Firewall-1
<[email protected]>
To: [email protected]
Subject: Re: [FW-1] need basic help installing Hotfix 15
Date: Wed, 29 Jun 2005 22:38:44 -0400
After FW01 gets updated, should I install the policy to FW01, 02 and 03?
(their code is still at HF04 or whatever it is at this point...), will
that be OK to do?
Yes, you must always update the SmartCenter first and after it reboots push
the policy to the enforcement modules. A SmartCenter can handle its own rev
level or lower.
Now the instructions say to Use Smartupdate/smartconsole. I've never used
smartupdate. Is this the only method to push the code out to FW02 and
FW03?
Or can I simply co-ordinate with someone at the remote sites, send them
the HF15 CD and install it locally using installhfa.bat???
If you can get to the enforcement module remotely, say via SSH or TS, you
can copy the HFA file over so it's physically on the enforcement module and
run it remotely. That's what I do on my Nokia boxes even though I have
SmartUpdate available. Or ship a CD if you're OK with giving them the
password to the enforcement module.
What do they mean "installation hfa15 should be made to a single package
at a time"?
I don't know, I never understood it either.
Make darn sure you have a backup of your SmartCenter before you do
anything. If you're not aware of it, it is impossible to recover the policy
and objects from an enforcement module and rebuild your SmartCenter. I
always run an upgrade_export before I do anything in addition to imaging
the SmartCenter, but mine is not also an enforcement module.
Good luck! (I've never had one go wrong yet).
Ray
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
