Hi We have R60 HFA_06 on enforcement module and R65 HFA1 on the SmartCenter, I am going to apply latest HFA on SmartCenter to see if it helps. Thanks! Eric
On Fri, Mar 28, 2008 at 4:31 PM, Khievhen TEA <[EMAIL PROTECTED]> wrote: > Hi, > > What is the exact version of your Checkpoint Smartcenter and modules (is > R60 HFA_06 for all) and on what kind of platforms? > > The messages : > - "Mar 28 09:36:28 staff1 kernel: FW-1: ld_set_wto_ttl_ex: 1p is NULL or > bad_time(-1) is not zero" could be ignored and was fixed. > > - "staff1 kernel: fwdynlog_commit: failed translating alert param. i=121, > alert = 1 - setting alert = "log"" is according to Nokia about > Smartdefense > and could be solved by upgrading it. > > - "modprobe: modprobe: Can't locate module n" is a frequent message but I > don't know the meaning of this. After looking that message on the Internet > it should be an bug from Unix system. > > Could you describe your network environnement? > > Best regards, > > Khievhen TEA > > 2008/3/28, Security Stig <[EMAIL PROTECTED]>: > > > > Hello, > > > > I have a problem where Hide NAT becomes erratic (R60HFA6) and then stops > > for > > the first /24 part of /22 block when policy pushed to multiple clusters > > IP's in the range 192.27.37.x or 192.27.38 192.27.39.x work fine but > they > > are on the same NIC and the same subnet mask. > > The problem resolves itself if I push to just the one firewall cluster > > > > The same rule number and nat rule is logged in Tracker, with nat and > > without > > nat, sometimes in the same second on same node. > > > > eth3 Link encap:Ethernet HWaddr 00:04:23:CC:50:B1 > > inet addr:192.27.36.44 Bcast:192.27.39.255 Mask: > 255.255.252.0 > > > > Anyone seen this behavior before (load is low) > > Eric > > > > > > At time of event > > Mar 28 09:36:28 staff1 kernel: FW-1: ld_set_wto_ttl_ex: 1p is NULL or > > bad_time(-1) is not zero > > Mar 28 09:36:25 staff1 modprobe: modprobe: Can't locate module eth4-1 > > Mar 28 09:36:25 staff1 modprobe: modprobe: Can't locate module eth4-0 > > Mar 28 09:36:25 staff1 modprobe: modprobe: Can't locate module eth5-75 > > Mar 28 09:36:25 staff1 modprobe: modprobe: Can't locate module eth5-74 > > Mar 28 09:36:24 staff1 modprobe: modprobe: Can't locate module n > > Mar 28 09:36:23 staff1 kernel: fwdynlog_commit: failed translating alert > > param. i=121, alert = 1 - setting alert = "log" > > Mar 28 09:36:23 staff1 kernel: fwdynlog_commit: failed translating alert > > param. i=120, alert = 1 - setting alert = "log" > > Mar 28 09:36:23 staff1 kernel: VPN-1: ERROR: No license for encryption, > > disabling encryption features > > Mar 28 09:36:22 staff1 modprobe: modprobe: Can't locate module n > > Mar 28 09:36:19 staff1 modprobe: modprobe: Can't locate module n > > > > > > Scanned by Check Point Total Security Gateway. > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
