Best practice (from me) is to push the policy with a database backup right before updating SmartDefense, update SmartDefense and then push the policy again.

The backup contains not only the user database, policy, etc., it contains all of the SmartDefense settings. If you have an SD issue, you can restore and get the old SD settings back.

Also make darn sure that the enforcement module and the SmartCenter are on the same HFA level. There has been at least one SD issue caused by the enforcement module being few HFA's back from the SmartCenter.

Ray

From: no-need to-list <[EMAIL PROTECTED]>
Reply-To: Mailing list for discussion of Firewall-1 <[email protected]>
To: [email protected]
Subject: Re: [FW-1] Stange firewall issues....
Date: Tue, 25 Apr 2006 19:54:38 -0700

Yes...but in my case is affecting some users...
the only think I can think of... is the last SmartDefense update....which was applied few days ago... I hope those jokers at Checkpoint have not introduced another bug....just like around HFA06 or 7



Tom Louis <[EMAIL PROTECTED]> wrote: I have seen this also, nothing to a point where it has caused any big issues
but every now and then something is being dropped that shouldn't




----- Original Message -----
From: "no-need to-list"
To:
Sent: Tuesday, April 25, 2006 8:59 PM
Subject: [FW-1] Stange firewall issues....


> Has anyone encountered these issues with R55 HFA17?
>
> The firewall occasionally drop traffic (any type..from HTTP to DNS lookup)
> with the last rule...clean UP rule.
>
> While there rules  before that cleanup rule that  specifically allow the
> traffic.....this has been working for a long time...just start happening
> today....
>
> I am at loss what it could be....I disabled the cluster ...rebooted
> firewall....it work fine for approximate 30 minutes and then it start
> doing it again.
>
> Any pointers are greatly appreciated....
> Regards
>
>
>
>
>
> ---------------------------------
> Love cheap thrills? Enjoy PC-to-Phone  calls to 30+ countries for just
> 2�/min with Yahoo! Messenger with Voice.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================



---------------------------------
Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to