>>> On 8/30/2007 at 4:43 AM, <[EMAIL PROTECTED]> wrote: > Had a similar issue and the solution was to reset specific SmartDefense > settings which conflicts with the R65 version, here the solution: > > Please try the following: > 1) Make backup of conf directory or do full backup. > 2) Stop any SmartConsole applications > 3) Open GUIDBedit Tool > 4) In GUIDBedit: > From Table > Other > Inspect > remove inspect objects: > > welchia_icmp_block_code > cisco_ios_dos_inspect_code > SDU_log_func copyright_note > > From Table > Managed Objects > asm > AdvancedSecurityObject > > asm_update_version change value to 1. > > This will allow an update of SmartDefense signatures to occur the next > time an update is requested via SmartDashboard. > > It was working for me !
Thanks. Your message set me down the right track. Simply going into GUIDBedit and resetting the "asm_update_version" so that I could then reload the SmartDefense definitions was enough. So again, I went into "Table> Managed Objects> asm> AdvancedSecurityObject> asm_update_version" and changed the value to 1. Then I started SmartDashboard, went to the SmartDefense tab, and hit "Online Update." After loading the update, viola! Problem fixed. > "Kesper, Olav" <[EMAIL PROTECTED]> > Sent by: Mailing list for discussion of Firewall-1 > <[email protected]> > 30.08.2007 11:53 > Please respond to > Mailing list for discussion of Firewall-1 > <[email protected]> > > > To > [email protected] > cc > > Subject > Re: [FW-1] upgrade_import Problems from R55 to R65 > > > > > > > Do you have used the command "upgrade_export" on the old box? > The result is a tarball with the configuration ready for use with the > "upgrade_import" tool on the new box. > > Olav > >> -----Original Message----- >> From: Mailing list for discussion of Firewall-1 >> [mailto:[EMAIL PROTECTED] On Behalf >> Of Crist Clark >> Sent: Wednesday, August 29, 2007 11:23 PM >> To: [email protected] >> Subject: [FW-1] upgrade_import Problems from R55 to R65 >> >> I appear to be having some trouble upgrading a SmartCenter >> from R55 to R65. I'm installing R65 on a fresh system choosing the >> upgrade option. I have a gzipped tarball from the R55 server, and the >> installation appears to go without a problem. No ominous >> messages during the install or that I can find in the CPInstLog >> directory. >> >> However, when I go to install a policy on an R55 enforcement module, >> it fails to compile. The details are, >> >> Installation Targets Version Policy Type > Details >> globalstar-fw-1 NG AI Advanced >> Security internet-firewalls-combined: >> globalstar-fw-1 NG AI Advanced >> Security "/opt/CPngcmp-R65/conf/updates.def", line >> 5654: ERROR: cannot find <ADP_ENABLE_SMB_RENAME_LOG> anywhere >> globalstar-fw-1 NG AI Advanced >> Security "/opt/CPngcmp-R65/conf/updates.def", line >> 5700: ERROR: cannot find <ADP_ENABLE_SMB_TRANS_LOG> anywhere >> globalstar-fw-1 NG AI Advanced >> Security "/opt/CPngcmp-R65/lib/asm_dynamic_props.def", >> line 109: ERROR: cannot find <smb_trans_block_code> anywhere >> globalstar-fw-1 NG AI Advanced >> Security Compilation failed. >> globalstar-fw-1 NG AI Advanced >> Security Operation ended with errors. >> >> The complaints are about files in the R55 compatibility package. >> So I'm think there is something wrong with the import. I haven't >> touched the rule base. Just trying to install exactly what was >> imported. Not finding help in the documentation. Ideas on how to >> fix this? B¼information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact [EMAIL PROTECTED] ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
