Is the CD a 3DES version? Have you tried installing the FW-1 Service Packs from a lower to greater basis (e.g. SP2, then SP3, then SP4, then SP5, then SP6)? Have you tried updating the driver of your NIC's? Are there any extra firewall applications running (personal firewalls e.t.c.)? Do you have WinPcap installed? If so uninstall it and try again. Is QoS installed? If so, uninstall it and try again. Are you installing FW-1 on a Windows 2000 default installation? If so, harden the OS first and then install the FW-1, you should have the minimum needed services running before you install FW-1, unless off course you want s**t interfering with your FW-1 installation. And by all means, uninstall vendor specific management agents before you try to install FW-1. Maybe you should start from these.
Cheers, Dimitris. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED]] On Behalf Of Alfred Deisinger Sent: Thursday, January 30, 2003 1:11 AM To: [EMAIL PROTECTED] Subject: [FW-1] Blue Screen on Windows 2000 installing FW1 Service Packs Hi. I really need some help here. I've been installing FW-1 from a cd without a hitch. The cd is a version 4.1 cd, not a 2000 V4.1 cd. I've tried to get one of those, but Checkpoint says that they are a rare item and I probably won't be able to get one not that NG is out Anyway, I install the FW-1 stand alone or distributed module without a hitch. I use fw putlic to install the license. I've tried this with a valid module license or a stand alone evaluation license. I get some errors in the event viewer stating that the license can't be loaded. I determined that this was due to the lack of the service packs and a reaction to windows 2000 from checkpoint licensing support. Anyway, I install the FW1 SP6 3DES and I get a Blue Screen. I've tried FW1 SP3 as well and I also get a blue screen. During the install of the service pack, I get two errors about fwkern.exe. A document I read infers that I can ignore these errors although I don't have much choice anyway. Then I get the dreaded Blue Screen The machine reboots and when it starts again I get a blue screen stating that the fw.sys could not load. At that point I can start the machine using the last known good configuration. I attempt to uninstall SP6, but it crashes with an error about a corrupt Uninst.isu file. I can uninstall FW-1 and reinstall it, but it blue screens everytime I attempt the service pack installation. I've started from a new server install so many times now, that I can do it blindfolded Can anyone help? Specs. Compaq DL380 512mb with 2 embedded nics and one additional netflex which is disabled in windows 2000 Windows 2000 SP3 FW-1/VPN-1 Version 4.1 SP6 downloaded from Checkpoint's site One server image configuration is an out of the box Compaq server with Windows 2000 SP3 and all the default stuff that compaq installs A second server image configuration is an out of the box Compaq server with Windows 2000 SP3 hardened as per System Experts document Hardening Windows 2000 by Phil Cox. System Log Errors prior to the service pack install but after the license install The FireWall-1 service failed to start due to the following error: The system cannot find the file specified. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. FW1: Open Failed (0xf24677e4) FW1: FW: Failed to Copy NdisWanIp to FW1_NdisWanIp FW1: RtlQueryResidtryValues for NdisWanIp failed (0xc--> FW1: -->0000034) FW1: FwDriverEntryMac: Failed to configure Adapter (S--> FW1: -->tatus=c0000034) FW1: DriverEntry: failed to init Mac (status c0000034) System Log Errors prior to the service pack install but after the license install FireWall-1: Could not put license in running module: The system cannot find the file specified. FireWall-1: Unable to open '\Device\FW1': The system cannot find the file specified. FireWall-1: install: Operation failed: Overlapped I/O operation is in progress. FW1SVC: Failed to install module FireWall-1: Failed to Load Security Policy: No State Saved FW1SVC: Fetching Security Policy from failed FireWall-1: fw_ctl_forwarding: setting to 2 FireWall-1: Unable to open '\Device\FW1': The system cannot find the file specified. FireWall-1: fw_ctl_forwarding: ioctl failed: Overlapped I/O operation is in progress. FireWall-1: Failed to Load Security Policy: No State Saved FW1SVC: Fetching Security Policy from localhost failed Errors during service pack install 1. Failed to execute fwkern.exe -v -u CP_FW1 2. Failed to execute fwkern.exe -v -u CP_FW1MP Blue Screen errors upon installation of the service pack Stop 0000001E ndis.sys KMODE_EXCEPTION_NOT_HANDLED or Stop 0000000A hal.dll IRQL_NOT_LES_OR_EQUAL Application Log Errors after the first restart FireWall-1: Unable to open '\Device\FW1': The system cannot find the file specified. FireWall-1: Failed to Uninstall Security Policy from oscafw1: Overlapped I/O operation is in progress. FW1SVC: Failed to unload security policy (rc=1) FireWall-1: Unable to open '\Device\FW1': The system cannot find the file specified. FireWall-1: uninstall: Operation failed: Overlapped I/O operation is in progress. FW1SVC: Failed to uninstall FireWall Module (rc=1) FW1SVC: Failed to terminate fwd process(pid=128,error=5) FW1SVC: FW-1 Stopped Blue Screen errors upon reboot c000026c {unable to load device driver} \systemroot\system32\drivers\fw.sys error status was 0xc0000221 System Log Errors after the second restart using the last known good configuration The previous system shutdown at 5:27:20 PM on 1/29/2003 was unexpected. FW1: Open Failed (0xf246b7e4) FW1: FW: Failed to Copy NdisWanIp to FW1_NdisWanIp Application popup: Windows - Unable to Load Device Driver : \SystemRoot\System32\drivers\fw.sys device driver could not be loaded. Error Status was 0xc0000221 The FireWall-1 service failed to start due to the following error: The specified driver is invalid. The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001e (0xc0000005, 0xf87935f5, 0x00000001, 0x000000bc). Microsoft Windows 2000 [v15.2195]. A dump was saved in: C:\WINNT\MEMORY.DMP. Application Log Errors after the second restart using the last known good configuration FireWall-1: Could not put license in running module: The system cannot find the file specified. FireWall-1: Unable to open '\Device\FW1': The system cannot find the file specified. FireWall-1: install: Operation failed: Overlapped I/O operation is in progress. FW1SVC: Failed to install module FW1SVC: VPN-1 Accelerator Card is not available FireWall-1: FireWall-1 Management Server is running FireWall-1: Failed to Load Security Policy: No State Saved FW1SVC: Fetching Security Policy from localhost failed FireWall-1: fw_ctl_forwarding: setting to 2 FireWall-1: Unable to open '\Device\FW1': The system cannot find the file specified. FireWall-1: fw_ctl_forwarding: ioctl failed: Overlapped I/O operation is in progress. FW1SVC: Setting fwforwarding succeeded FireWall-1: Failed to Load Security Policy: No State Saved FW1SVC: Fetching Security Policy from localhost failed WMI ADAP was unable to load the FW1 performance library because it threw an exception: 0x80041001 Can anyone help? My forehead is flat from beating it against the wall. Thanks. Alfred Deisinger ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
