Thanks for replies. We made a litle investigation of this issue and found the following: For those who do not use database revision control for some reason, there is the way to solve this error. Just reset SmartDefense settings to default configuration via Central Configuration button in SmartDashboard, and then enable them one by one until the problem occurs, then disable the last enabled option. It is also possible that turning off some of the Web Intelligence and/or SmartDefense protections will solve this problem too. As for us this problem occurs when nearly 90 persent of the SmartDefense protections and some of the Web Intelligence protections are enabled. It looks like there is some limitation exists on a number of SmartDefense/Web Intelligence protections that could be enabled simultaneously.
So I wonder is this a bug or a feature? wbr, Artyom. César L Berhó Gallardo <[EMAIL PROTECTED]> От: Mailing list for discussion of Firewall-1 <[email protected]> 15.01.2007 03:19 Срок ответа для: Mailing list for discussion of Firewall-1 Кому: [email protected] Копия: Тема: Re: [FW-1] Policy compilation error after SmartDefence update That error occurred us when we update smartdefense (the last update), as Ray said, when we applied the restore using database revision control. Regards, Cesar -----Mensaje original----- De: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] En nombre de Ray Enviado el: Viernes, 12 de Enero de 2007 05:44 p.m. Para: [email protected] Asunto: Re: [FW-1] Policy compilation error after SmartDefence update If you did a database revision on the policy push right before you updated SmartDefense, you can restore it and you'll get your old SmartDefense definitions back. I've gotten in the habit of doing this and making a comment of "pre-SD update" on it. Ray >From: "Artyom S. Davidov" <[EMAIL PROTECTED]> >Reply-To: Mailing list for discussion of Firewall-1 ><[email protected]> >To: [email protected] >Subject: [FW-1] Policy compilation error after SmartDefence update >Date: Fri, 12 Jan 2007 15:08:29 +0300 > >Hi everyone! > >Yesterday we've updated SmartDefence definitions to version 591070103, >saved the policy, but we were unable to install it on the gateway. >When we are trying to install policy we get the following error: > >"D:\CheckPoint\FW1\R60\fw1\lib\base.def", line 382: INTERNAL ERROR in >LenLimit: displacement too big 4171 (max = 4080) >Compilation failed. > >We are running NGX R60 HFA04 on both gateway and smartcenter. > >I wonder what does it mean, and how to solve it? >Any ideas or suggestions are welcome. > >wbr > >Artyom > >================================================= >To set vacation, Out-Of-Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >================================================= _________________________________________________________________ Type your favorite song. Get a customized station. Try MSN Radio powered by Pandora. http://radio.msn.com/?icid=T002MSN03A07001 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
