Dallas,
Thanks, but comma however.....

I've verified all comments / names / colors in the policy. Still it
won't load. I'm to the point of either shutdown and re-start FW or
blow away the policy and start from scratch. (Only 11 rules, 20 or so
objects, no NAT).

I keep on 'keepping on'.

John E. Hahn
Sr. Distributed Products Analyst
Fiserv CBS - Arlington Heights
847-956-5757 - Direct to desk
800-568-4227 then * 5757
[EMAIL PROTECTED]
[EMAIL PROTECTED]


>>> "[EMAIL PROTECTED]" 06/15/00 12:13PM >>>
John:

For questions like this, that you need a fast answer, I like to use

www.securepoint.com -- which is a FW-1 list archive.  Try this..


Forum:     Firewall-1 (Admin)
Date:        Feb 29, 14:04
From:       Dameon Welch-Abernathy <[EMAIL PROTECTED]>

My guess is that you have an illegal character in a comment somewhere
that FireWall-1 missed during the compilation phase. I've seen
similiar errors in the past that come from this. Stick to alphanumeric
characters US ASCII, don't use semi-colons, etc.

-- PhoneBoy

>When we try to push a policy, we see this.  Any idea what is wrong?
>
>I am able to fetch the policy, but that seems a workaround.
>
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>new021400.W: Security Policy Script generated into new021400.pf
>new021400:
>Compiled OK.
>
>Installing Security Policy e:\FW\conf\new021400.pf on all.all@fw1
>Failed to Install Security Policy on fw1: The program issued a
command but
>the command length is incorrect.
>
>Installing Security Policy e:\FW\conf\new021400.pf on all.all@fw2
>Installing Security Policy on fw2 succeeded







From: "John Hahn" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
CC: "Tim Hughes" <[EMAIL PROTECTED]>
Subject: [FW1] Policy load failure.
Date: Thu, 15 Jun 2000 10:43:25 -0400

Nokia IP/330. v4.0 SP-4, managed by a WIN NT workstation. v4.0 GUI.

When I try to load the policy I get the following response:

Installing Security Policy C:\WINNT\FW\conf\fwrules.pf on
all.all@fw-johnny1
Failed to Install Security Policy on fw-johnny1: The program issued
a
command but the command length is incorrect.

Any ideas, guidance, or help is appreciated. Thanks.

John E. Hahn
Sr. Distributed Products Analyst
Fiserv CBS - Arlington Heights
847-956-5757 - Direct to desk
800-568-4227 then * 5757
[EMAIL PROTECTED] 
[EMAIL PROTECTED] 



================================================================================
      To unsubscribe from this mailing list, please see the
instructions at
                http://www.checkpoint.com/services/mailing.html 
================================================================================

________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at
http://www.hotmail.com 




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to