hi,
we had some other license issues about VPN in the past, I recommend
to install an eval-lic on your mgmt and module and try if everything
is working fine with this eval-lic.
if you don't have an eval lic, ask your reseller or
checkpoint-partner for one ...
if it works with the eval -> open a case with your
checkpoint-reseller (or checkpoint) ...
cheers
reinhard
At 16:50 24.08.2005, you wrote:
All,
I am having an issue with a recent upgrade to NGX regarding
installing the Desktop Security Policy to the Policy Server.
Background
----------
- Prior to upgrade, all running fine on NG FP3. Everything solid, no
errors or issues.
- Management Server on Win2003, freshly built with NGX added. Config
was imported from an upgrade_export file.
- Single module on Nokia IPSO 3.9, upgraded not 'new install'.
Normal gateway policy installs fine and is fully operational.
Not all the licenses upgraded fine:
- 75 SC user licenses (3 blocks of 25)
- Two of these are not in Enterprise Support and didn't upgrade
- Also, the corresponding three Policy Server licenses read:
"The upgrade in the following case is not necessary. The NGX
upgrade can continue and will not be affected by this error." (A
manual upgrade using license_upgrade fails also.)
SecureClients can connect and download topology, so this is not
affecting service.
Problem
-------
The Desktop Security Policy will not install onto the policy server:
"Memory allocation problem in Policy installation function."
Fixes So Far
------------
Initially, the policy server wasn't being started.
(ps -aux | grep dtps = no processes)
The following has been added to fwauthd.conf on the Nokia:
0 dtps dtpsd respawn 0
A 'cpstop ; cpstart' does now starts the service, but the issue is
still present.
Running 'dtps debug on' and then reviewing the dtps.elg and
dtpsd.elg files shows that:
user_count_not_ok: Desktop Security was not installed on the Policy Server.
There are only 22 users defined in the user list.
There is a 25 user license for SecureClient (CPVP-VSC) attached to
the manager, but no UPGRADED license for the Policy server
(CPVP-VPS) attached to the module.
I am 95% SURE that this will be a licensing issue.
Your thoughts?
Tom
--
---
Tom Rowan BSc (Hons), MBCS, CCSE+
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
--
Reinhard Stich ASSIST [EMAIL PROTECTED]
Internet Security AG, 1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
