Is the CD a 3DES version? Have you tried installing the FW-1 Service
Packs from a lower to greater basis (e.g. SP2, then SP3, then SP4, then
SP5, then SP6)? Have you tried updating the driver of your NIC's? Are
there any extra firewall applications running (personal firewalls
e.t.c.)? Do you have WinPcap installed? If so uninstall it and try
again. Is QoS installed? If so, uninstall it and try again. Are you
installing FW-1 on a Windows 2000 default installation? If so, harden
the OS first and then install the FW-1, you should have the minimum
needed services running before you install FW-1, unless off course you
want s**t interfering with your FW-1 installation. And by all means,
uninstall vendor specific management agents before you try to install
FW-1. Maybe you should start from these.

Cheers,

Dimitris.

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED]] On Behalf Of
Alfred Deisinger
Sent: Thursday, January 30, 2003 1:11 AM
To: [EMAIL PROTECTED]
Subject: [FW-1] Blue Screen on Windows 2000 installing FW1 Service Packs


Hi.

I really need some help here.

I've been installing FW-1 from a cd without a hitch.  The cd is a
version 4.1 cd, not a 2000 V4.1 cd.  I've tried to get one of those, but
Checkpoint says that they are a rare item and I probably won't be able
to get one not that NG is out

Anyway, I install the FW-1 stand alone or distributed module without a
hitch.  I use fw putlic to install the license.  I've tried this with a
valid module license or a stand alone evaluation license.  I get some
errors in the event viewer stating that the license can't be loaded.  I
determined that this was due to the lack of the service packs and a
reaction to windows 2000 from checkpoint
licensing support.  Anyway, I install the FW1 SP6 3DES and I get a Blue
Screen.  I've tried FW1 SP3 as well and I also get a blue screen.
During the install of the service pack, I get two errors about
fwkern.exe.  A document I read infers that I can ignore these errors
although I don't have much choice anyway.  Then I get the dreaded Blue
Screen

The machine reboots and when it starts again I get a blue screen stating
that the fw.sys could not load.  At that point I can start the machine
using the last known good configuration.  I attempt to uninstall SP6,
but it crashes with an error about a corrupt Uninst.isu file.  I can
uninstall FW-1 and reinstall it, but it blue screens everytime I attempt
the service pack installation.  I've
started from a new server install so many times now, that I can do it
blindfolded

Can anyone help?

Specs.

Compaq DL380 512mb with 2 embedded nics and one additional netflex which
is disabled in windows 2000
Windows 2000 SP3
FW-1/VPN-1 Version 4.1
SP6 downloaded from Checkpoint's site
One server image configuration is an out of the box Compaq server with
Windows 2000 SP3 and all the default stuff that compaq installs
A second server image configuration is an out of the box Compaq server
with Windows 2000 SP3 hardened as per System Experts document Hardening
Windows 2000 by Phil Cox.

System Log Errors prior to the service pack install but after the
license install
The FireWall-1 service failed to start due to the following error:
The system cannot find the file specified.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
                FW1: Open  Failed (0xf24677e4)
FW1: FW: Failed to Copy NdisWanIp to FW1_NdisWanIp
FW1: RtlQueryResidtryValues for NdisWanIp failed (0xc-->
FW1: -->0000034)
FW1: FwDriverEntryMac: Failed to configure Adapter (S-->
FW1: -->tatus=c0000034)
FW1: DriverEntry: failed to init Mac (status c0000034)

System Log Errors prior to the service pack install but after the
license install
FireWall-1: Could not put license in running module: The system cannot
find the file specified.
FireWall-1: Unable to open '\Device\FW1': The system cannot find the
file specified.
FireWall-1: install: Operation failed: Overlapped I/O operation is in
progress.
FW1SVC: Failed to install module
FireWall-1: Failed to Load Security Policy: No State Saved
FW1SVC: Fetching Security Policy from  failed
FireWall-1: fw_ctl_forwarding: setting to 2
FireWall-1: Unable to open '\Device\FW1': The system cannot find the
file specified.
FireWall-1: fw_ctl_forwarding: ioctl failed: Overlapped I/O operation is
in progress.
FireWall-1: Failed to Load Security Policy: No State Saved
FW1SVC: Fetching Security Policy from localhost failed

Errors during service pack install
        1.      Failed to execute fwkern.exe -v -u CP_FW1
        2.      Failed to execute fwkern.exe -v -u CP_FW1MP

Blue Screen errors upon installation of the service pack
        Stop 0000001E ndis.sys KMODE_EXCEPTION_NOT_HANDLED
or
        Stop 0000000A hal.dll IRQL_NOT_LES_OR_EQUAL

Application Log Errors after the first restart
FireWall-1: Unable to open '\Device\FW1': The system cannot find the
file specified.
FireWall-1: Failed to Uninstall Security Policy from oscafw1: Overlapped
I/O operation is in progress.
FW1SVC: Failed to unload security policy (rc=1)
FireWall-1: Unable to open '\Device\FW1': The system cannot find the
file specified.
FireWall-1: uninstall: Operation failed: Overlapped I/O operation is in
progress.
FW1SVC: Failed to uninstall FireWall Module (rc=1)
FW1SVC: Failed to terminate fwd process(pid=128,error=5)
FW1SVC: FW-1 Stopped

Blue Screen errors upon reboot
        c000026c {unable to load device driver}
        \systemroot\system32\drivers\fw.sys
        error status was 0xc0000221

System Log Errors after the second restart using the last known good
configuration
The previous system shutdown at 5:27:20 PM on 1/29/2003 was unexpected.
FW1: Open  Failed (0xf246b7e4)
FW1: FW: Failed to Copy NdisWanIp to FW1_NdisWanIp
Application popup: Windows - Unable to Load Device Driver :
\SystemRoot\System32\drivers\fw.sys device driver could not be loaded.
Error Status was 0xc0000221
The FireWall-1 service failed to start due to the following error:
The specified driver is invalid.
The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000001e
(0xc0000005, 0xf87935f5, 0x00000001, 0x000000bc). Microsoft Windows 2000
[v15.2195]. A dump was saved in: C:\WINNT\MEMORY.DMP.

Application Log Errors after the second restart using the last known
good configuration
FireWall-1: Could not put license in running module: The system cannot
find the file specified.
FireWall-1: Unable to open '\Device\FW1': The system cannot find the
file specified.
FireWall-1: install: Operation failed: Overlapped I/O operation is in
progress.
FW1SVC: Failed to install module
FW1SVC: VPN-1 Accelerator Card is not available
FireWall-1: FireWall-1 Management Server is running
FireWall-1: Failed to Load Security Policy: No State Saved
FW1SVC: Fetching Security Policy from localhost failed
FireWall-1: fw_ctl_forwarding: setting to 2
FireWall-1: Unable to open '\Device\FW1': The system cannot find the
file specified.
FireWall-1: fw_ctl_forwarding: ioctl failed: Overlapped I/O operation is
in progress.
FW1SVC: Setting fwforwarding succeeded
FireWall-1: Failed to Load Security Policy: No State Saved
FW1SVC: Fetching Security Policy from localhost failed
WMI ADAP was unable to load the FW1 performance library because it threw
an exception: 0x80041001

Can anyone help?  My forehead is flat from beating it against the wall.
Thanks.
Alfred Deisinger

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to