> Try a clean installation onto the gateway. I did a clean installation gateway R65.02. Push policy fail with same errors.
> > On Tue, Sep 7, 2010 at 3:22 AM, Konstantin Y Tselikhin <[email protected]> wrote: > > > > On Tue, 7 Sep 2010 08:43:23 +0800, Konstantin Y Tselikhin <[email protected]> > > > wrote: > > > > > > > After upgrade management portal from R70.30 to R71.10, when > > > > attempting to push policy on security gateway version R65 (HFA_70 Hotfix > > > > 670) it fail with following error: > > > > > > > > gw NGX R65 Network Security Standard: > > > > gw NGX R65 Network Security > > > > /opt/CPNGXCMP-R71/conf/Standard.pf, line 103689: ERROR: stab > > > > identifier > > > > ssl_tunnels_excluded_services for host all redefined > > > > gw NGX R65 Network Security > > > > /opt/CPNGXCMP-R71/conf/Standard.pf, line 103700: ERROR: stab > > > > identifier > > > > ssl_tunnels_excluded_services for host all redefined > > > > gw NGX R65 Network Security > > > > > > Can you show us the relevant section in your Standard.pf file? > > In my Standard.pf file declaration "ssl_tunnels_excluded_services" repeated > > 3 times, see below: > > > > #ifdef PROFILE_0 > > ssl_tunnels_excluded_services = { > > <6, 443, 443>, > > <6, 636, 636>, > > <6, 993, 993>, > > <6, 18205, 18205> > > }; > > #define ADP_SSL_TUNNELS_EXCLUDED_SERVICES_EXISTS 1 > > > > #endif > > > > #ifdef PROFILE_0 > > ssl_tunnels_excluded_services = { > > <6, 443, 443>, > > <6, 636, 636>, > > <6, 993, 993>, > > <6, 18205, 18205> > > -------------- line 103689 -------------- }; > > #define ADP_SSL_TUNNELS_EXCLUDED_SERVICES_EXISTS 1 > > > > #endif > > > > #ifdef PROFILE_0 > > ssl_tunnels_excluded_services = { > > <6, 443, 443>, > > <6, 636, 636>, > > <6, 993, 993>, > > <6, 18205, 18205> > > -------------- line 103700 -------------- }; > > #define ADP_SSL_TUNNELS_EXCLUDED_SERVICES_EXISTS 1 > > > > #endif > > > > > > > Did you run the pre-upgrade verifier before the upgrade? Didn't it warn > > > you about conflicts? > > No, I don`t run pre-upgrade verification. > > But no warnings in upgrading process. > > > > > Was this a new NGX R65 installation or was it upgraded from an older > > > version in the past? > > This version was upgraded from older version. > > Older version R61. > > > > > > Scanned by Check Point Total Security Gateway. > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [email protected] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [email protected] > > ================================================= > > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway.
