NGX R65 Release Notes - Check Point

More documents

Recommendations

Info

SmartCenter Server 5. If, when using the Check Point Installation Wrapper, the download of updates fails during an upgrade (for example, because the machine is not connected to the Internet), then the upgrade will continue using the tools that exist on the CD. To use the most recent version: a. Download the updates from: https://support.checkpoint.com/downloads/bin/autoupdate/ut/r61/index.htm. b. Save the update on the local disk of your SmartCenter server. c. Restart the installation wrapper and choose the second option on the download page: I already downloaded and extracted the Upgrade Utilities. 6. Check Point 4.1 gateways and embedded devices are not supported with this release. After upgrading the SmartCenter server to NGX, these objects will remain, but you will not be able to install policy on them. 7. VPN-1 Net is no longer supported. 8. After upgrading SmartCenter, but before upgrading the gateways, SecureID users may not be able to connect. A workaround is detailed on SecureKnowledge sk17820. This solution documented there should be implemented in the compatibility package directories as well: For NG gateways (NG - R55) - Unix /opt/CPngcmp-DAL/lib/ - Windows C:\Program Files\CheckPoint\NGCMP For R55W gateways - Unix /opt/CPR55Wcmp/lib - Windows C:\Program Files\CheckPoint\R55WCmp\lib 9. When upgrading SmartCenter with a duplicate machine on the Windows platform, the following message may appear after selecting Import configuration file: Failed to import configuration. Imported configuration file does not contain the correct data. To resolve the issue, do one of the following: • Remove the file gzip.exe from the environment path. • Remove gzip.exe altogether. 10. Advanced Upgrade from the wrapper, or use of the Export/Import tools, is not supported on a secondary SmartCenter server. 11. In this release, SmartCenter does not manage gateways prior to NG FP3. If you have such gateways, it is recommended that you upgrade them as well. 12. After a SmartCenter server has been upgraded or copied via the Advanced Upgrade feature, previously defined UTM-1 Edge devices will not be able to connect to the SmartCenter server, and the Connection Wizard will generate "object non-registered" messages. To resolve this issue, use SmartUpdate to re-install a specific firmware package. 13. To manage UTM-1 Edge devices with an NGX R65 SmartCenter server that was migrated from Nokia to a different platform, see Check Point SecureKnowledge sk30389. VPN-1/FireWall-1 NGX R65 Known Limitations Supplement. Last Update — February 4, 2008 5:37 pm 32
SmartCenter Server Policy Installation 14. After aborting an installation and before attempting to install policy, make sure that there are no processes running the fwm load command on the SmartCenter server. 15. By selecting the Install Policy option Install on all selected gateways, if it fails do not install on gateways of the same version, policy is installed on gateways by group. There are four such groups: • UTM-1 Edge • R55W • NGX • all others (R55 and prior versions) When this option is selected, if policy fails when installing to a member of one of the groups, the policy will not be installed to any other gateways in that group. Policy installation will continue uninterrupted to members of other groups, however. 16. Uninstall policy on LSM profiles is not supported. 17. Policy installation is divided into several stages: Verification, compilation, file transfer, etc. Each stage has a default time-out of 300 seconds. Should you encounter time-out problems while installing a policy, you can change the value of the timeout in the following way: a. Run cpstop on the SmartCenter server. b. Run DBedit and change the install_policy_timeout attribute that is located under firewall_properties in the global properties. A valid value is 0-10000. c. Close DBEdit and run cpstart. 18. Policy may not install successfully on an InterSpect device, even if SIC is established. To resolve this issue, make sure that the SmartCenter server's IP address(es) are configured in InterSpect's GUI Clients. SmartConsole Applications 19. When running a query on a Security Policy in SmartDashboard, only user-defined rules are displayed in the query result. Implied rules matching the query are not displayed, even if the option View Implied Rules is selected. 20. When switching the active file from SmartView Tracker, the new active file name will be automatically name by the system. It will not receive the user-defined file name. 21. UTM-1 Edge objects cannot be defined from the Manage menu in SmartDashboard. To define UTM-1 Edge objects, from the Objects Tree, right-click Check Point > New. 22. A Connectra object cannot be dragged & dropped into the Address Translation Rule Base. To add a Connectra object to a rule, right click on the relevant cell, select Add, and select the relevant Connectra object. 23. To perform SmartDefense Online Update in Demo Mode, use Demo Mode Advanced. Other Demo Modes do not support this feature. 24. InterSpect objects cannot be added to NAT rules. 25. After deploying Anti Virus signatures, the Express CI Deployment Status is not updated by clicking Refresh on the SmartDefense Services tab. This issue is resolved by closing and restarting SmartDashboard. VPN-1/FireWall-1 NGX R65 Known Limitations Supplement. Last Update — February 4, 2008 5:37 pm 33
Page 1 and 2: Check Point NGX R65 Known Limitatio
Page 3 and 4: ClusterXL ClusterXL In This Section
Page 5 and 6: ClusterXL 2. Performing an SNMP que
Page 7 and 8: ClusterXL Platform Specific — Sol
Page 9 and 10: ClusterXL 39. The following Web Int
Page 11 and 12: Endpoint Security Endpoint Security
Page 13 and 14: Endpoint Security 18. Endpoint Secu
Page 15 and 16: Eventia Suite 15. To upgrade a dist
Page 17 and 18: Firewall 5. The name of the install
Page 19 and 20: Firewall 31. In a cluster environme
Page 21 and 22: Firewall SecureClient 56. Policy in
Page 23 and 24: Provider-1/SiteManager-1 3. After u
Page 25 and 26: Provider-1/SiteManager-1 In additio
Page 27 and 28: Provider-1/SiteManager-1 SmartUpdat
Page 29 and 30: SecureXL SecureXL In This Section G
Page 31: SmartCenter Server SmartCenter Serv
Page 35 and 36: SmartPortal Platform Specific - Nok
Page 37 and 38: SmartUpdate Miscellaneous 11. When
Page 39 and 40: VPN VPN VPN Communities 1. When man
Page 41 and 42: VPN-1 Power VSX 27. When connecting

NGX R65 Release Notes - Check Point

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?