Firewall - Check Point

More documents

Recommendations

Info

SmartCenterSmartCenterIn This SectionInstallation, Upgrade, and Backward Compatibility page 12SmartDirectory page 14Policy Installation page 14VPN Communities page 15SmartConsole Applications page 15SmartCenter Clients on Motif page 16Logging page 16Management High Availability page 17Trust Establishment (SIC) page 17Platform Specific — Windows page 17Platform Specific — Nokia page 18OPSEC page 18Miscellaneous page 18OSE page 18Dynamically Assigned IP Address (DAIP) Modules page 18SmartPortal page 19Installation, Upgrade, and Backward Compatibility1. After upgrading from NG FP2, the name of the Internal Certificate Authority (CA)that was previously entered is not displayed in the Check Point Configuration Tool(cpconfig > Certificate Authority tab), although it is still viable. If it is reconfigured,then it is displayed.2. When using the Upgrade Export and Import utilities on the Windows platform, themachine should be connected to the network. Alternatively, a connector can beused to simulate a connection. Refer to SecureKnowledge, solution sk19840 formore information regarding how to simulate a network connection during anupgrade.3. When upgrading with a duplicate machine whose IP address differs from theoriginal IP address of the SmartCenter Server, if Central licenses are used, theyshould be updated to the new IP address. This can be done via the User Center athttp://usercenter.checkpoint.com, by choosing the action License > Move IP >Activate Support and Subscription.Enterprise Suite NGX R61 Known Limitations Supplement Last Update — February 7, 2007 12
SmartCenter4. If the Import or the Export operation fails while upgrading, the entire operation willfail with the exception of these products: Eventia Reporter, SmartView Monitor,SecureXL and UserAuthority Server. Use the log file of the Import/Export operationto understand what caused the problem and fix it. The log file is located at:• Windows: C:\program files\checkpoint\CPInstLog• Unix: /opt/CPInstLog5. When upgrading a Log Server, choose the Upgrade option and ignore the otheroptions (to export the configuration or to perform pre-upgrade verifications). Theseoptions are irrelevant for Log Server upgrades. Also, the backwards compatibility(BC) package is installed on every Log Server. It can be safely removed, as it is notin use on a Log Server.6. If, when using the Check Point Installation Wrapper, the download of updates failsduring an upgrade (for example, because the machine is not connected to theInternet), then the upgrade will continue using the tools that exist on the CD. Touse the most recent version:1. Download the updates from:https://support.checkpoint.com/downloads/bin/autoupdate/ut/r61/index.html2. Save the update on the local disk of your SmartCenter server3. Restart the installation wrapper and choose the second option on the downloadpage: I already downloaded and extracted the Upgrade Utilities.7. Check Point 4.1 gateways and embedded devices are no longer supported with thisrelease. After upgrading the SmartCenter Server to NGX (R60A), these objects willremain, but you will not be able to install policy on them.8. Support for VPN-1 Net has been discontinued.9. After upgrading SmartCenter, but before upgrading the gateways, SecureID usersmay not be able to connect. A workaround is detailed on SecureKnowledge(sk17820).This solution should be implemented in the compatibility package directories aswell:For NG gateways (NG FCS - R55):• Unix /opt/CPngcmp-R60/lib/• Windows C:\Program Files\CheckPoint\NGCMPFor R55W gateways:• Unix /opt/CPR55Wcmp/lib• Windows C:\Program Files\CheckPoint\R55WCmp\libEnterprise Suite NGX R61 Known Limitations Supplement Last Update — February 7, 2007 13
Page 1 and 2: ......Check Point Enterprise Suite.
Page 3 and 4: Firewall4. When the Web Intelligenc
Page 6 and 7: Firewall28. When using SmartDirecto
Page 8 and 9: Firewall47. When connecting to the
Page 10 and 11: FirewallDynamically Assigned IP Add
Page 14 and 15: SmartCenter10. When upgrading Smart
Page 16 and 17: SmartCenter23. In order to be able
Page 18 and 19: SmartCentersaved. The solution is t
Page 20 and 21: 1. Using a text editor, open the fi
Page 22 and 23: SecurePlatform1. Log into SecurePla
Page 24 and 25: SecurePlatform23. The Dynamic routi
Page 26 and 27: SecurePlatform34. BGP is not suppor
Page 28 and 29: SecurePlatform56. In legacy High Av
Page 31 and 32: LicensingSmartView Monitor9. If a l
Page 33 and 34: Eventia ReporterEventia ReporterIns
Page 35 and 36: ClusterXLClusterXLIn This SectionUp
Page 37 and 38: ClusterXL11. When setting an interf
Page 39 and 40: • For other out of state messages
Page 41 and 42: ClusterXL37. If two or more interfa
Page 43 and 44: ClusterXLSave the file and chmod 77
Page 45 and 46: • For other OPSEC certified clust
Page 47 and 48: • For Flows acceleration, the mes
Page 49 and 50: SSL Network Extender7. To install S
Page 51 and 52: IntegrityIntegrityIn This SectionIn
Page 53 and 54: IntegrityWhen you change the settin
Page 55 and 56: IntegrityIn order to prevent contin
Page 57 and 58: IntegrityIntegrity clients that rec
Page 59 and 60: IntegrityIn search fields in the In
Page 61: Safe@Office firmware 5.0.82 or earl

Firewall - Check Point

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?