Firewall - Check Point

SecurePlatform44. After updating the time zone of SecurePlatform, make sure to reboot the computerto ensure that the new time zone is applied to all applications.45. Restoring the system settings via an SSH connection is not supported. Use aconsole that is locally connected to restore the system settings.46. When using multiple RADIUS servers, make sure that the servers are exact replicasof each other. When using multiple RADIUS servers that contain different users, thelogin failure or success depends on the listed order of the servers in theconfiguration file (i.e., when one RADIUS server denies access, SecurePlatform willdeny access, and does not try to authenticate the user against other RADIUSservers).47. When using RADIUS groups access and user lockout features at the same time,there is no way to see that users that accessed the system via RADIUS groups arelocked.48. When performing snapshot, revert, backup & restore operations, be sure that youhave at least 10% free space in the partition /var.49. Important Notice: This version modifies the way in which SecurePlatform handlesthe BIOS clock settings. For instance, it is no longer necessary to manually changethe BIOS clock when switching to or from daylight savings time. Make sure to setthe BIOS clock to UTC (GMT) time.50. When restoring system configuration from older versions of SecurePlatform, thetime zone configuration is not restored properly. Make sure to configure the timezone manually after restore.51. When using SNMP, enable the service prior to adding new users. The commandsnmp users show does not function as expected if the service is not enabled first.52. Under a high load, Advanced Routing messages are sometimes printed to theSecurePlatform console.53. SecurePlatform NGX (R60) can be configured to send system (syslog) messages toremote syslog servers. Note that system logs can include sensitive information likeIP addresses of the system, etc. Make sure that when you make use of this facilityyou are transferring logs only over encrypted or secured channels (e.g. trustednetworks or VPNs).54. Restart PPPoE and PPTP network connections if initial connection to the modemfails. When restarting the connection from the command line, you may need tore-enter PPP credentials.55. Deploying a DHCP server on a SecurePlatform machine running a VPN-1enforcement module is not supported. As a workaround, deploy the DHCP server ona SecurePlatform machine not running an enforcement module.Enterprise Suite NGX R61 Known Limitations Supplement Last Update — February 7, 2007 27