Firewall - Check Point

SmartPortalVPN-1 Edge/Embedded51. When executing Management High Availability (between SmartCenter and/or CMAand/or MDS) change over may not succeed when SmartPortal is connected inRead/Write mode. To resolve this issue, you should allow access from SmartPortalto Read-only administrators, only; or, use SmartView Monitor to disconnect theRead/Write mode in SmartPortal.VPN-1 Edge/EmbeddedUpgrade1. After a SmartCenter server has been upgraded or copied via the Advanced Upgradefeature, previously defined VPN-1 Edge devices will not be able to connect to theSmartCenter server, and the Connection Wizard will generate objectnon-registered messages. To resolve this issue, use SmartUpdate to re-install aspecific firmware package.SmartCenter2. A VPN-1 Edge gateway will fail to install if a Check Point gateway has an interfacenamed in and the SofaWare Reducer is disabled. To resolve this issue, make surethat the SofaWare Reducer is enabled, or avoid naming Check Point gatewayinterfaces as in.3. Make sure that in the Advanced Permanent Tunnel configuration, thelife_sign_timeout attribute is larger than life_sign_transmitter_intervalattribute.4. When making changes to the IP addresses of the DMZ or LAN, make sure that theaddress ranges of these two interfaces do not temporarily overlap, as unpredictablebehavior may occur.Policy Installation5. When using the group All VPN-1 Embedded devices defined as Remote Access on therulebase, the icon that is defined is wrong and can be safely ignored.6. The following error message may appear when compiling VPN-1 Edge policy fromthe command line: Incorrectly built binary which accesses errno or h_errnodirectly. Needs to be fixed. This message can be safely ignored.VPN Communities7. In order for SofawareLoader to create topologies suitable for Sofaware 4.5appliances, do the following:Enterprise Suite NGX R61 Known Limitations Supplement Last Update — February 7, 2007 19