Thank you guys for your recommendations, I will rebuild the configuration manually from the files objects_5_0.C, rulebases_5_0.fws and fwauth.NDB The hard disk can't be read even replacing the scsi controller card, now I have the files from the gateway and started the config already. Lot of work but we had to learn to backup daily in the hard way =[
Regards, --Ivan. 2011/10/4, FW-1-MAILINGLIST automatic digest system <[email protected]>: > There are 12 messages totaling 1056 lines in this issue. > > Topics of the day: > > 1. How to upgrade from R70 to R75.20 (2) > 2. Your opinions about R75/R75.20 (7) > 3. Odd http requests after upgrade to R75.20 > 4. Question about restoring smartcenter (2) > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ---------------------------------------------------------------------- > > Date: Mon, 3 Oct 2011 10:31:51 +0300 > From: a bv <[email protected]> > Subject: How to upgrade from R70 to R75.20 > > Hi, > > I would like to have your recommendations of steps for upgrading R70 > SPLAT standalone gateways to R75.20 Software blade licensed standalone > gateways. As all we do i would like have healty problemless good > performing gateways at the end. > > > Regards > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > Date: Mon, 3 Oct 2011 10:05:16 +0300 > From: a bv <[email protected]> > Subject: Your opinions about R75/R75.20 > > Hi, > > I would like have your opinions about R75.20 or R75 . Was it worth to > upgrade? Were there perfomance gains? Do you have problems on them? > > > regards > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > Date: Mon, 3 Oct 2011 08:51:27 +0100 > From: Eamonn Twohig <[email protected]> > Subject: Re: Odd http requests after upgrade to R75.20 > > Thanks Pierre and Alexey. We stepped back to R75 first, no joy, so we went > back to R71.40, all is working good again now. I've left our Support Case > open with Check Point. > > I also came across mails from June of this year, from this list, that > highlighted problems with R75 and R75.20 in relation to http/https requests > - > http://www.mail-archive.com/[email protected]/msg27375.html. > Known issue for 4 months ... wish I found that BEFORE I went ahead with the > upgrade! > > Regards, > eamonn > > -----Original Message----- > From: Pierre Lamy [mailto:[email protected]] > Sent: 01 October 2011 04:13 > To: Mailing list for discussion of Firewall-1 > Cc: Eamonn Twohig > Subject: Re: [FW-1] Odd http requests after upgrade to R75.20 > > I opened a Task for this today. It's a known issue, documented > (somewhat) as a limitation of R75.20 > > It also kills access to Voyager in IPSO. > > -Pierre > > On 9/30/2011 1:27 PM, Eamonn Twohig wrote: >> The actual IP, no. We have a /27 available, so say the gw is at 1.2.3.4, >> well the web server is NAT'ed behind 1.2.3.5, ftp is behind 1.2.3.6, >> smtp is behind 1.2.3.7, dns is behind 1.2.3.8, etc. >> >> For a test, we tried NAT'ing the web server behind 1.2.3.9, and we went >> with auto-NAT this time as we usually manually NAT items, but we got >> exactly the same results. Consistency! >> >> Thanks, >> eamonn >> >> -----Original Message----- >> From: Mailing list for discussion of Firewall-1 >> [mailto:[email protected]] On Behalf Of Gary >> Scott >> Sent: 30 September 2011 16:55 >> To: [email protected] >> Subject: Re: [FW-1] Odd http requests after upgrade to R75.20 >> >> Are you using the FW's external IP for service NAT? >> >> >> >> ________________________________ >> From: Eamonn Twohig<[email protected]> >> To: [email protected] >> Sent: Thursday, September 29, 2011 7:03 PM >> Subject: [FW-1] Odd http requests after upgrade to R75.20 >> >> Hi all, >> >> We've a bit of an oddity here after upgrading our firewalls to R75.20 >> from R65 HFA70. Management Server was done about 10 days ago whilst >> gateways were done in the last two days. >> >> Since the upgrade of one of the gateways yesterday, everything seemed to >> be working as previous until we discovered that no-one could access our >> website anymore. A quick investigation, using tcpdump and fw monitor, >> revealed that the firewall was dropping all https requests when hitting >> the external IP of the web server. Which is the weird thing, because >> no-one is sending https requests, only http. It seems that the firewall >> is somehow converting http requests to https and then obviously dropping >> them as our rulebase will only allow http. There are no problems >> accepting and forwarding smtp traffic; there are no problems for anyone >> doing udp lookups against our dns server; no problems for anyone hitting >> our ftp server. Only the web server is causing us grief. >> >> >> We've opened a support case with Check Point but so far, they are >> stumped. This mailing list has some experienced people as members >> though, so thought I'd ask ye too. Has anyone seen something like this >> before? >> >> If all resources on the DMZ were inaccessible then that would make more >> sense, or at least make it easier to troubleshoot, but this specific >> issue with inbound http requests getting dropped as https is a little >> odd. >> >> Thanks, >> Eamonn >> >> -------------------------- >> Sent from my BlackBerry Device >> >> >> >> Confidentiality Notice: This electronic message contains information >> that is privileged or confidential, is the property of QC Data, and is >> intended only for the use of the intended recipient. If you are not the >> intended recipient, you are hereby notified that disclosure, copying, >> distribution or use of this information is prohibited. If you have >> received this message in error, please delete the original message and >> any copy of it in your possession and notify us by telephone or email >> immediately. >> >> QC Data (Ireland) Limited >> >> Registered in Ireland, Number: 158091 >> VAT Registration No.: IE 6556091K >> >> Registered office: 70 Sir John Rogersons Quay, Dublin 2, Republic of >> Ireland. >> >> >> Scanned by Check Point Total Security Gateway. >> >> ================================================= >> To set vacation, Out-Of-Office, or away messages, >> send an email to [email protected] >> in the BODY of the email add: >> set fw-1-mailinglist nomail >> ================================================= >> To unsubscribe from this mailing list, >> please see the instructions at >> http://www.checkpoint.com/services/mailing.html >> ================================================= >> If you have any questions on how to change your >> subscription options, email >> [email protected] >> ================================================= >> >> Scanned by Check Point Total Security Gateway. >> >> Scanned by Check Point Total Security Gateway. >> >> ================================================= >> To set vacation, Out-Of-Office, or away messages, >> send an email to [email protected] >> in the BODY of the email add: >> set fw-1-mailinglist nomail >> ================================================= >> To unsubscribe from this mailing list, >> please see the instructions at >> http://www.checkpoint.com/services/mailing.html >> ================================================= >> If you have any questions on how to change your >> subscription options, email >> [email protected] >> ================================================= >> >> >> >> Confidentiality Notice: This electronic message contains information that >> is privileged or confidential, is the property of QC Data, and is intended >> only for the use of the intended recipient. If you are not the intended >> recipient, you are hereby notified that disclosure, copying, distribution >> or use of this information is prohibited. If you have received this >> message in error, please delete the original message and any copy of it in >> your possession and notify us by telephone or email immediately. >> >> QC Data (Ireland) Limited >> >> Registered in Ireland, Number: 158091 >> VAT Registration No.: IE 6556091K >> >> Registered office: 70 Sir John Rogerson’s Quay, Dublin 2, Republic of >> Ireland. >> >> IƧ��[�(^rC�{S�֥I�.�+r �^�� >> >> ================================================= >> To set vacation, Out-Of-Office, or away messages, >> send an email to [email protected] >> in the BODY of the email add: >> set fw-1-mailinglist nomail >> ================================================= >> To unsubscribe from this mailing list, >> please see the instructions at >> http://www.checkpoint.com/services/mailing.html >> ================================================= >> If you have any questions on how to change your >> subscription options, email >> [email protected] >> ================================================= >> > > > > > > Confidentiality Notice: This electronic message contains information that is > privileged or confidential, is the property of QC Data, and is intended only > for the use of the intended recipient. If you are not the intended > recipient, you are hereby notified that disclosure, copying, distribution or > use of this information is prohibited. If you have received this message in > error, please delete the original message and any copy of it in your > possession and notify us by telephone or email immediately. > > QC Data (Ireland) Limited > > Registered in Ireland, Number: 158091 > VAT Registration No.: IE 6556091K > > Registered office: 70 Sir John Rogerson’s Quay, Dublin 2, Republic of > Ireland. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > Date: Mon, 3 Oct 2011 10:35:51 +0100 > From: Hugo van der Kooij <[email protected]> > Subject: Re: Question about restoring smartcenter > > On Thu, 29 Sep 2011 09:20:34 -0500, Ivan Arteaga > <[email protected]> wrote: > >> Recently we lost our smartcenter server due to a hard disk crash.. >> our last backup is 3 months old and it is different than the current >> configuration, lot of changes in policies and network objects (I know >> we should backup more often =[ ) but my question is.... We already >> have the files from the gateway and get the policies in script form >> but is there any way to restore the smartcenter policies from the >> gateway configuration or script files? otherwise I will have to >> rewrite the policies one by one in the smart dashboard. > > Ivan, > > Use the backup and retype all changes of the last 3 months. > > The format used to send information to the gateway is not realy usable. > > Hugo. > > -- > [email protected] http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > Date: Mon, 3 Oct 2011 10:40:15 +0100 > From: Hugo van der Kooij <[email protected]> > Subject: Re: Your opinions about R75/R75.20 > > On Mon, 3 Oct 2011 10:05:16 +0300, a bv <[email protected]> wrote: >> Hi, >> >> I would like have your opinions about R75.20 or R75 . Was it worth to >> upgrade? Were there perfomance gains? Do you have problems on them? > > Read the release notes about the changes. The feature list has been > changed quite a bit. > > When you just upgrade it and add no new features the impact is > identical. But if you enable SSL intercept. Then you may see some > serious CPU usage. > > Hugo. > > -- > [email protected] http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > Date: Mon, 3 Oct 2011 10:43:50 +0100 > From: Hugo van der Kooij <[email protected]> > Subject: Re: How to upgrade from R70 to R75.20 > > On Mon, 3 Oct 2011 10:31:51 +0300, a bv <[email protected]> wrote: > >> I would like to have your recommendations of steps for upgrading R70 >> SPLAT standalone gateways to R75.20 Software blade licensed >> standalone >> gateways. As all we do i would like have healty problemless good >> performing gateways at the end. > > Read the upgrade documentation. > > Export config for backup puposes. Install upgrade tools. Export another > config with those tools. Cleanly install R75.20 and import the config. > > pre upgrade verifiers are your friends. > > However I seem to note a bit of a Must Consule Somebody Else sort of > questions. > > Hugo. > > -- > [email protected] http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > Date: Mon, 3 Oct 2011 12:42:08 +0200 > From: Reinhard Stich <[email protected]> > Subject: Re: Your opinions about R75/R75.20 > > At 09:05 03.10.2011, you wrote: >>Hi, >> >>I would like have your opinions about R75.20 or R75 . Was it worth to >>upgrade? Were there perfomance gains? Do you have problems on them? > > I use R75.20, it's stable and I like the new app-control features ... > performance is the same as it was with R75. > > br > reinhard > > -- > Reinhard Stich [email protected] > Arrow ECS Internet Security AG, 1100 Wien, Wienerbergstrasse 11 > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > Date: Mon, 3 Oct 2011 14:10:35 +0300 > From: a bv <[email protected]> > Subject: Re: Your opinions about R75/R75.20 > > Many thanks for the answer? what about the perfomance issue comparing > with R70 on same hardware? They wrote some code again as i guess to > gain more performance while the blades are getting added and the > firewall becomes more complex. > > 2011/10/3 Reinhard Stich <[email protected]>: >> At 09:05 03.10.2011, you wrote: >>> >>> Hi, >>> >>> I would like have your opinions about R75.20 or R75 . Was it worth to >>> upgrade? Were there perfomance gains? Do you have problems on them? >> >> I use R75.20, it's stable and I like the new app-control features ... >> performance is the same as it was with R75. >> >> br >> reinhard >> >> -- >> Reinhard Stich [email protected] >> Arrow ECS Internet Security AG, 1100 Wien, Wienerbergstrasse 11 >> Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 >> >> Scanned by Check Point Total Security Gateway. >> >> ================================================= >> To set vacation, Out-Of-Office, or away messages, >> send an email to [email protected] >> in the BODY of the email add: >> set fw-1-mailinglist nomail >> ================================================= >> To unsubscribe from this mailing list, >> please see the instructions at >> http://www.checkpoint.com/services/mailing.html >> ================================================= >> If you have any questions on how to change your >> subscription options, email >> [email protected] >> ================================================= >> >> Scanned by Check Point Total Security Gateway. >> > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > Date: Mon, 3 Oct 2011 06:29:38 -0700 > From: Charles-Etienne Prévost <[email protected]> > Subject: Re: Your opinions about R75/R75.20 > > Hi, > > Based on about 8-10 upgrades we have done so far I have not seen any > significant performance improvement for similar feature sets. I would > definitely recommend going directly to R75.20 if possible.. we encountered a > few issues with R75, which appear to be fixed ( mostly ) with R75.20. > However, most of the environments were on open servers, so my opinion might > be a little biased. > > Cheers, > Charles > > Charles-Etienne Prévost > Analyste en sécurité de l'information > Information Security Analyst > GoSecure Inc. > > Experts en sécurité de l'information > The Trusted Experts in Information Security > http://www.gosecure.ca > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[email protected]] On Behalf Of a bv > Sent: Monday, October 03, 2011 7:11 AM > To: [email protected] > Subject: Re: [FW-1] Your opinions about R75/R75.20 > > Many thanks for the answer? what about the perfomance issue comparing > with R70 on same hardware? They wrote some code again as i guess to > gain more performance while the blades are getting added and the > firewall becomes more complex. > > 2011/10/3 Reinhard Stich <[email protected]>: >> At 09:05 03.10.2011, you wrote: >>> >>> Hi, >>> >>> I would like have your opinions about R75.20 or R75 . Was it worth to >>> upgrade? Were there perfomance gains? Do you have problems on them? >> >> I use R75.20, it's stable and I like the new app-control features ... >> performance is the same as it was with R75. >> >> br >> reinhard >> >> -- >> Reinhard Stich [email protected] >> Arrow ECS Internet Security AG, 1100 Wien, Wienerbergstrasse 11 >> Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 >> >> Scanned by Check Point Total Security Gateway. >> >> ================================================= >> To set vacation, Out-Of-Office, or away messages, >> send an email to [email protected] >> in the BODY of the email add: >> set fw-1-mailinglist nomail >> ================================================= >> To unsubscribe from this mailing list, >> please see the instructions at >> http://www.checkpoint.com/services/mailing.html >> ================================================= >> If you have any questions on how to change your >> subscription options, email >> [email protected] >> ================================================= >> >> Scanned by Check Point Total Security Gateway. >> > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > Date: Mon, 3 Oct 2011 06:41:22 -0700 > From: Charles-Etienne Prévost <[email protected]> > Subject: Re: Question about restoring smartcenter > > Ivan, > > Depending on the amount of effort required to replay all changes, it might > be worth it to get these files recovered from the dead HD.. How dead is it > ? ( weird question I know ! ) Did you try to mount it on another machine > yet? > > If you can recover these 3 files only (objects_5_0.C, rulebases_5_0.fws and > fwauth.NDB ), you can rebuild most of your Smart Center. It is a lengthy > process too but could still be your best pick .. > > Charles > > Charles-Etienne Prévost > Analyste en sécurité de l'information > Information Security Analyst > GoSecure Inc. > > Experts en sécurité de l'information > The Trusted Experts in Information Security > http://www.gosecure.ca > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[email protected]] On Behalf Of Hugo van > der Kooij > Sent: Monday, October 03, 2011 5:36 AM > To: [email protected] > Subject: Re: [FW-1] Question about restoring smartcenter > > On Thu, 29 Sep 2011 09:20:34 -0500, Ivan Arteaga > <[email protected]> wrote: > >> Recently we lost our smartcenter server due to a hard disk crash.. >> our last backup is 3 months old and it is different than the current >> configuration, lot of changes in policies and network objects (I know >> we should backup more often =[ ) but my question is.... We already >> have the files from the gateway and get the policies in script form >> but is there any way to restore the smartcenter policies from the >> gateway configuration or script files? otherwise I will have to >> rewrite the policies one by one in the smart dashboard. > > Ivan, > > Use the backup and retype all changes of the last 3 months. > > The format used to send information to the gateway is not realy usable. > > Hugo. > > -- > [email protected] http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > Date: Mon, 3 Oct 2011 11:34:13 -0600 > From: Sergio Alvarez <[email protected]> > Subject: Re: Your opinions about R75/R75.20 > > In some of our customers' deployments with UTM-1 appliances, I noticed a > performance improvement going from R70 to R75 (and even R71). In deployments > with open servers instead of Check Point appliances, the difference was not > so noticeable. > What did improve, no matter the hardware platform, was the time it takes to > open the SmartDashboard and install the policy. > > Regards > > 2011/10/3 Charles-Etienne Prévost <[email protected]> > >> Hi, >> >> Based on about 8-10 upgrades we have done so far I have not seen any >> significant performance improvement for similar feature sets. I would >> definitely recommend going directly to R75.20 if possible.. we encountered >> a >> few issues with R75, which appear to be fixed ( mostly ) with R75.20. >> However, most of the environments were on open servers, so my opinion >> might >> be a little biased. >> >> Cheers, >> Charles >> >> Charles-Etienne Prévost >> Analyste en sécurité de l'information >> Information Security Analyst >> GoSecure Inc. >> >> Experts en sécurité de l'information >> The Trusted Experts in Information Security >> http://www.gosecure.ca >> >> -----Original Message----- >> From: Mailing list for discussion of Firewall-1 [mailto: >> [email protected]] On Behalf Of a bv >> Sent: Monday, October 03, 2011 7:11 AM >> To: [email protected] >> Subject: Re: [FW-1] Your opinions about R75/R75.20 >> >> Many thanks for the answer? what about the perfomance issue comparing >> with R70 on same hardware? They wrote some code again as i guess to >> gain more performance while the blades are getting added and the >> firewall becomes more complex. >> >> 2011/10/3 Reinhard Stich <[email protected]>: >> > At 09:05 03.10.2011, you wrote: >> >> >> >> Hi, >> >> >> >> I would like have your opinions about R75.20 or R75 . Was it worth to >> >> upgrade? Were there perfomance gains? Do you have problems on them? >> > >> > I use R75.20, it's stable and I like the new app-control features ... >> > performance is the same as it was with R75. >> > >> > br >> > reinhard >> > >> > -- >> > Reinhard Stich [email protected] >> > Arrow ECS Internet Security AG, 1100 Wien, Wienerbergstrasse 11 >> > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 >> > >> > Scanned by Check Point Total Security Gateway. >> > >> > ================================================= >> > To set vacation, Out-Of-Office, or away messages, >> > send an email to [email protected] >> > in the BODY of the email add: >> > set fw-1-mailinglist nomail >> > ================================================= >> > To unsubscribe from this mailing list, >> > please see the instructions at >> > http://www.checkpoint.com/services/mailing.html >> > ================================================= >> > If you have any questions on how to change your >> > subscription options, email >> > [email protected] >> > ================================================= >> > >> > Scanned by Check Point Total Security Gateway. >> > >> >> Scanned by Check Point Total Security Gateway. >> >> ================================================= >> To set vacation, Out-Of-Office, or away messages, >> send an email to [email protected] >> in the BODY of the email add: >> set fw-1-mailinglist nomail >> ================================================= >> To unsubscribe from this mailing list, >> please see the instructions at >> http://www.checkpoint.com/services/mailing.html >> ================================================= >> If you have any questions on how to change your >> subscription options, email >> [email protected] >> ================================================= >> >> ================================================= >> To set vacation, Out-Of-Office, or away messages, >> send an email to [email protected] >> in the BODY of the email add: >> set fw-1-mailinglist nomail >> ================================================= >> To unsubscribe from this mailing list, >> please see the instructions at >> http://www.checkpoint.com/services/mailing.html >> ================================================= >> If you have any questions on how to change your >> subscription options, email >> [email protected] >> ================================================= >> > > > > -- > Sergio Alvarez > CISSP | CCSE+ > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > Date: Mon, 3 Oct 2011 11:34:13 -0600 > From: Sergio Alvarez <[email protected]> > Subject: Re: Your opinions about R75/R75.20 > > In some of our customers' deployments with UTM-1 appliances, I noticed a > performance improvement going from R70 to R75 (and even R71). In deployments > with open servers instead of Check Point appliances, the difference was not > so noticeable. > What did improve, no matter the hardware platform, was the time it takes to > open the SmartDashboard and install the policy. > > Regards > > 2011/10/3 Charles-Etienne Prévost <[email protected]> > >> Hi, >> >> Based on about 8-10 upgrades we have done so far I have not seen any >> significant performance improvement for similar feature sets. I would >> definitely recommend going directly to R75.20 if possible.. we encountered >> a >> few issues with R75, which appear to be fixed ( mostly ) with R75.20. >> However, most of the environments were on open servers, so my opinion >> might >> be a little biased. >> >> Cheers, >> Charles >> >> Charles-Etienne Prévost >> Analyste en sécurité de l'information >> Information Security Analyst >> GoSecure Inc. >> >> Experts en sécurité de l'information >> The Trusted Experts in Information Security >> http://www.gosecure.ca >> >> -----Original Message----- >> From: Mailing list for discussion of Firewall-1 [mailto: >> [email protected]] On Behalf Of a bv >> Sent: Monday, October 03, 2011 7:11 AM >> To: [email protected] >> Subject: Re: [FW-1] Your opinions about R75/R75.20 >> >> Many thanks for the answer? what about the perfomance issue comparing >> with R70 on same hardware? They wrote some code again as i guess to >> gain more performance while the blades are getting added and the >> firewall becomes more complex. >> >> 2011/10/3 Reinhard Stich <[email protected]>: >> > At 09:05 03.10.2011, you wrote: >> >> >> >> Hi, >> >> >> >> I would like have your opinions about R75.20 or R75 . Was it worth to >> >> upgrade? Were there perfomance gains? Do you have problems on them? >> > >> > I use R75.20, it's stable and I like the new app-control features ... >> > performance is the same as it was with R75. >> > >> > br >> > reinhard >> > >> > -- >> > Reinhard Stich [email protected] >> > Arrow ECS Internet Security AG, 1100 Wien, Wienerbergstrasse 11 >> > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 >> > >> > Scanned by Check Point Total Security Gateway. >> > >> > ================================================= >> > To set vacation, Out-Of-Office, or away messages, >> > send an email to [email protected] >> > in the BODY of the email add: >> > set fw-1-mailinglist nomail >> > ================================================= >> > To unsubscribe from this mailing list, >> > please see the instructions at >> > http://www.checkpoint.com/services/mailing.html >> > ================================================= >> > If you have any questions on how to change your >> > subscription options, email >> > [email protected] >> > ================================================= >> > >> > Scanned by Check Point Total Security Gateway. >> > >> >> Scanned by Check Point Total Security Gateway. >> >> ================================================= >> To set vacation, Out-Of-Office, or away messages, >> send an email to [email protected] >> in the BODY of the email add: >> set fw-1-mailinglist nomail >> ================================================= >> To unsubscribe from this mailing list, >> please see the instructions at >> http://www.checkpoint.com/services/mailing.html >> ================================================= >> If you have any questions on how to change your >> subscription options, email >> [email protected] >> ================================================= >> >> ================================================= >> To set vacation, Out-Of-Office, or away messages, >> send an email to [email protected] >> in the BODY of the email add: >> set fw-1-mailinglist nomail >> ================================================= >> To unsubscribe from this mailing list, >> please see the instructions at >> http://www.checkpoint.com/services/mailing.html >> ================================================= >> If you have any questions on how to change your >> subscription options, email >> [email protected] >> ================================================= >> > > > > -- > Sergio Alvarez > CISSP | CCSE+ > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ------------------------------ > > End of FW-1-MAILINGLIST Digest - 2 Oct 2011 to 3 Oct 2011 (#2011-124) > ********************************************************************* > > Scanned by Check Point Total Security Gateway. > Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
