> Hi, > > After an upgrade from hfa2 to hfa50 on a nokia ip device, the fwd > becomes unstable everytime I push the policy. (it worked correctly with > hfa02). > > The fwd debug doesn't work because the cpwd restarts the daemon with a > new PID. > > Is there a way to tell the cpwd to start fwd systematically with debug > option ? > > Does anyone know if there is an strace like program for IPSO ? > >
I had a similar issue in HFA_50 with policy installs; hanging up an NOKIA Cluster. For the moment, initial test seem to indicate that deleting 'too many' policy packages on the SmartCenter >server< database using 'cp_merge delete_policy...' may have worked for me. Advise : if you have more then 20 policy packages in your SmartCenter database (check with 'cp_merge list_policy....); then try deleting a bunch untill you have only a few left. Then check, whether your original problem is still persistent. There may be some time (racing) conditions when the SmartCenter server traverses its database when pushing a policy. It is unclear wether this issue is HFA_50 specific. M. Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
