-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hugo van der Kooij wrote:
> In order for SecureXL to work you must match two settings. One in IPSO
> and one in Check Point. If you are lucky it is allready documented in
> SK. Otherwise I need to find the names in the call we opened for several
> ~ IPSO based installations which were all resolved by setting these
> values right.
Could missing hardware be the issue. I should have three identical Nokia
IP560's, one has been RMA'd. When I run the 'fwaccel stat' and 'fwaccel
ver' command the one that was RMA'd gives me different results. This one
that was RMA'd happens to be the VRRP master at the moment:
Test Firewall# fwaccel ver
FireWall-1 version: NGX (R61) HFA_01, Hotfix 601 - Build 012
Acceleration Device: Nokia IPSO
Accelerator Version 1.0
FireWall-1 API version: 2.22NG (28/3/2005)
Accelerator API version: 2.22NG (28/3/2005)
Test Firewall# fwaccel stat
Accelerator Status : on
Templates : disabled by FireWall-1 starting from rule #1
Accelerator Features : Accounting, NAT, Cryptography, Routing,
HasClock, Templates, VirtualDefrag, GenerateIcmp,
IdleDetection, Sequencing, TcpStateDetect,
AutoExpire, DelayedNotif, McastRouting,
WireMode
Cryptography Features : Tunnel, UDPEncapsulation, MD5, SHA1, NULL,
3DES, DES, AES-128, AES-256, ESP, LinkSelection,
DynamicVPN, NatTraversal, EncRouting
Secondary Firewall# fwaccel ver
FireWall-1 version: NGX (R61) HFA_01, Hotfix 601 - Build 012
Acceleration Device: Nokia IPSO
Accelerator Version 1.0
FireWall-1 API version: 2.22NG (28/3/2005)
Accelerator API version: 2.22NG (28/3/2005)
Secondary Firewall# fwaccel stat
Accelerator Status : off
Accelerator Features : Accounting, NAT, Cryptography, Routing,
HasClock, Templates, VirtualDefrag, GenerateIcmp,
IdleDetection, Sequencing, TcpStateDetect,
AutoExpire, DelayedNotif, McastRouting,
WireMode
Cryptography Features Mask : not available
Primary (Master) Firewall# fwaccel ver
FireWall-1 version: NGX (R61) HFA_01, Hotfix 601 - Build 012
Acceleration Device: <name not available>
Accelerator Build <not available>
FireWall-1 API version: 2.22NG (28/3/2005)
Accelerator API version: <not available>
Primary (Master) Firewall# fwaccel stat
Accelerator Status : off
Accelerator Features Mask : not available
Cryptography Features Mask : not available
- --
Thanks,
E. Recio
MAC user's dynamic debugging list evaluator? Never heard of that.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFHvafAKoXvoXXmAZ0RAi7fAJ9wekddn59egPiCNTllwYpGlggDiwCgmq7q
AJd0+NnQTk8x+lYFsSuI4ts=
=vuAg
-----END PGP SIGNATURE-----
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
