We always install the policy during production due to we make a lot of 
changes in some environments and, believe me, users never told us anything 
about stopping sessions (in firewalls without encryption neither user 
authentication).
Anyway, a collegue told me not to install the policy during production !!

Where can I find information about changing the inspect script to make some 
services survive in policy install?

Thanks

>From: Amar <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED], [EMAIL PROTECTED],  
>[EMAIL PROTECTED]
>Subject: RE: [FW1] Installing Security Policy
>Date: Tue, 2 Jan 2001 07:18:39 -0800 (PST)
>
>that would be interesting to know.. any info on how to
>stop users being knocked off would be appreciated.
>
>trust me in my environment everyone gets knocked off
>when we push an update
>
>cheers
>--- [EMAIL PROTECTED] wrote: > Amar and all,
> > If this was the case it wouldn't be possible to do
> > anything during
> > production hours. Established sessions normally
> > survive. The exceptions are
> > sqlnet2, winframe and other pre defined services
> > defined as "other". It's
> > possible to change the inspect script for some of
> > these services to make
> > them survive a policy install, but I've not been
> > able to get this working
> > with all such services.
> >
> > Lars
> >
> > > -----Original Message-----
> > > From: Amar [mailto:[EMAIL PROTECTED]]
> > > Sent: 2. januar 2001 15:07
> > > To: Estela Ruiz;
> > [EMAIL PROTECTED]
> > > Subject: Re: [FW1] Installing Security Policy
> > >
> > >
> > >
> > > from my experience almost all users (that are
> > > accessing anything behind the firwall) are knocked
> > off
> > > !!!!
> > >
> > > cheers and happy new year to all of you
> > >
> > > Amar Singh
> > > Internet Systems Engineer
> > > Cable & Wireless
> > > Cisco Certified (CCNP, CCNA)
> > > Checkpoint Certified (CCSE, CCSA)
> > >
> > >
> > > --- Estela Ruiz <[EMAIL PROTECTED]> wrote: >
> >
> > > > Hello all,
> > > >
> > > > First of all, sorry if this question was mailed
> > > > before...
> > > >
> > > > I would like to know what are the problems in
> > > > installing the Security Policy
> > > > when the firewall in on production. I  think
> > that
> > > > encryption sessions end,
> > > > but is there anything else?
> > > >
> > > > What are the results of installing the Security
> > > > Policy?
> > > >
> > > > Thanks and Happy New Year!!
> > > >
> > > > Estela
> > > >
> > >
> >
>______________________________________________________________
> > > ___________
> > > > Get Your Private, Free E-mail from MSN Hotmail
> > at
> > > > http://www.hotmail.com.
> > > >
> > > >
> > > >
> > > >
> > >
> >
>==============================================================
> > > ==================
> > > >      To unsubscribe from this mailing list,
> > please
> > > > see the instructions at
> > > >
> > > > http://www.checkpoint.com/services/mailing.html
> > > >
> > >
> >
>==============================================================
> > > ==================
> > >
> > >
> > > __________________________________________________
> > > Do You Yahoo!?
> > > Yahoo! Photos - Share your holiday photos online!
> > > http://photos.yahoo.com/
> > >
> > >
> > >
> >
>==============================================================
> > > ==================
> > >      To unsubscribe from this mailing list, please
> > see the
> > > instructions at
> > >
> > http://www.checkpoint.com/services/mailing.html
> > >
> >
>==============================================================
> > > ==================
> > >
>
>
>__________________________________________________
>Do You Yahoo!?
>Yahoo! Photos - Share your holiday photos online!
>http://photos.yahoo.com/

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to