RE: [FW1] Put License problem

[Cepeda, Josh]

Title: URI Resource and NAT

You might try running cpconfig and removing the old license and then adding the new one and then doing fw putkey on all management and firewall modules.

-----Original Message-----
From: Sangbutsarakum, Patai [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 24, 2001 11:24 PM
To: '[EMAIL PROTECTED]'
Subject: [FW1] Put License problem

Dear folks

I 'm implementing FW1-41 on Solaris 2.6. I got eval. license for the 1.2.3.4 everything work fine. Then I need to change this machine's IP to be 1.2.4.5 so I'm back to my distributor and ask for eval  license again. After I got the eval lincense for the new IP, I've tried to "fw putlic ..." as I did before but this time it said "Failed to add license: License Invalid".

What can I do to make FW1 up with new IP, ? reinstall ? ...

 

Wishing it make sense

Pat.

-----Original Message-----
From: Larry Pingree [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 23, 2001 23:05
To: Darren Brechman-Toussaint; '[EMAIL PROTECTED]'
Subject: RE: [FW1] URI Resource and NAT

There is no way to stop it.  Atually, its not natting it, its transparent proxying the connection. That is the way that Check Point intercepts the communications as they pass through the Firewall.

 

 

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Larry Pingree

Sr. Security Engineer/Check Point Instructor

CCSA, CCSE, CCSI, ICE, ICI, NSA

 

Website: http://www.SiegeWorks.com

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Darren Brechman-Toussaint
Sent: Tuesday, August 21, 2001 6:00 PM
To: '[EMAIL PROTECTED]'
Subject: [FW1] URI Resource and NAT

We have just added a URI resource and approp rules to our rulebase to drop code red traffic. We have now noticed that the source address for http traffic destined for our web servers is being translated into the firewall's address before being sent to the web server.

This is only causing problems on our web sites that have IP addresses restrictions implementated.

Has anyone got any ideas on how to stop the address translation happening?

Thanks
Darren