Re: [FW-1] Can not install Policy from Management Console to FW-1 module

[Bill]

Title: NG FP2 Security Server Hotfix

Your problem is not related to authentication or you would have receive an auth error instead of a "Received new control .....".   When you created the test environment did you create any interfaces on the firewall object?  You might want to port over the rules, objects, etc. to get a real idea of what an upgrade would do. ----- Original Message ----- From: Ruiyuan Jiang To: [EMAIL PROTECTED] Sent: Friday, September 20, 2002 3:41 PM Subject: [FW-1] Can not install Policy from Management Console to FW-1 module Hi, all     I am setting up a testing lab using eval license from CheckPoint. FW-1 module v4.0 runs on Solaris 2.6 (4 network cards) and management module runs on Windows NT server. I want to test it then I can upgrade our production CheckPoint to v4.1 from v4.0.   After installation, I can't install policy from console to Sun box. I have followed the suggestion from CheckPoint support to delete $FWDIR/conf/fwauth.keys and serverkeys.*, $FWDIR/database/authkeys.C and opsec_authkeys.C and modified $FWDIR/lib/control.map to both fwa1 and skey authentication method. I re-run "fw putkey" on both console and FW-1 module.   I started console first and then FW-1 module. When I started FW-1 module on Solaris (fwstart), I got messages:   # fwstart FireWall-1: starting fwd FireWall-1: Fetching Security policy from fwtestnt  (Note: the IP address is the NT management server) localhost Trying to fetch security policy from fwtestnt : FW: Received new control security key from fwtestnt Installing Security policy chk-071102 on all.all@fwtest1 Has only loopback(lo) interface, aborting... Failed to Load Security policy: No such file or directory Fetching Security policy from fwtestnt failed Trying to fetch Security policy from localhost: Failed to Load Security policy: No State Saved Fetching Security Policy from localhost failed can not fetch Security policy from fwtestnt localhost FireWall-1 started # When I tried to push policy from NT management server to Sun firewall-1 box through policy editor GUI, I got a message on the "Install Policy" popup dialog window: Installing Security Policy c:\winnt\fw\conf\chk-071102.pf on all.all@fwtest1 Failed to install Security Policy on fwtest1: The system can not find the file specified While on the Sun box UNIX console, I saw a message: Installing Security Policy chk-071102 on all.all@fwtest1 Can you tell where the problem? Thanks. Ruiyuan Jiang Liz Claiborne, Inc. (201) 295-7171