Firewall - Check Point

SmartCenterWhen this option is selected, if policy fails when installing to a member of one ofthe groups, the policy will not be installed to any other gateways in that group.Policy installation will continue uninterrupted to members of other groups, however.19. Uninstall of policy on LSM profiles is not supported.20. Policy installation is divided into several stages: Verification, compilation, filetransfer, etc. Each stage has a default time out of 300 seconds.Should you encounter time out problems while installing policy, you can change thevalue of the timeout in the following way:1. Run the command cpstop on the SmartCenter server.2. Use the DBedit tool to change the attribut install_policy_timeout located inGlobal Properties > firewall_properties. A valid value is from 0 to 10000.3. Close DBedit and run the command cpstart.VPN Communities21. When managing SmartLSM ROBO Gateways, some of which are VPN-1-enabledfrom a Standalone machine, the policy fetch operation may not succeed once VPNhas been established between the Standalone and the ROBO Gateway in question.In order to overcome this issue, you should add the CPD service as an excludedservice for each of the communities which have SmartLSM ROBO profiles. To dothis:1. Open the community object.2. In the Advanced Setting tab, choose the Excluded Services tab and add the CPDas an excluded service.SmartConsole Applications22. When deleting objects from SmartDashboard, in some cases the Where Used...option will not report that objects are being used in the database, and it is possibleto delete these objects without any warning. The following are cases in reference:• RADIUS and TACACS servers referenced by Templates in the Authenticationtab.• Users and User Groups contained by other User Groups.• For SmartDirectory Account Units referenced by External Groups the WhereUsed... option is applicable but the Delete operation cannot be performed. As aworkaround, restart (cpstop, cpstart) the SmartCenter Server. Note that allcases apply only if the objects were created after the SmartCenter Server wasstarted.Enterprise Suite NGX R61 Known Limitations Supplement Last Update — February 7, 2007 15