Thanks for the quick responses. This should make my life a bit easier now.
Jeremy Lieb CCSE-NG CCSE+NG Firewall Administrator Open Text Corporation 100 Tri-State Int'l Pkwy Third Floor Lincolnshire, IL 60069 18472679330 ext 4395 -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Hugo van der Kooij Sent: Friday, October 20, 2006 12:59 PM To: [email protected] Subject: Re: [FW-1] Pushing Policy On Fri, 20 Oct 2006, Jeremy Lieb wrote: > In previous versions of Checkpoint it seemed that when adding a new > rule to the policy a push to all firewalls on the policy was required. > Is this still required in NGX R60? Rules only need to be sent to the gateways involved. So if the change only involves gatewat-6 then that is the only gateway you need to push it to. > We have 20 or so gateways and pushing to all firewalls each time a new > rule is added, deleted, or disabled seems to cause some strange issues. > Any info would be great. This sound smore like you push all the rules to all the gateways. You can specify the gateway(s) on which a specific rules applies. Only for certain VPN action is advisable or even required sometimes to update all gateways. Hugo. -- [EMAIL PROTECTED] http://hvdkooij.xs4all.nl/ This message is using 100% recycled electrons. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
