Flash based Nokia - IPSO 4.1 - R60 HFA04

Hi,

Can anybody outline the correct procedure to get HFA04
installed on a
flash based Nokia system ? What we've done so far:

- yes, it's in the release notes of HFA04, but doesn't work
(making
softlinks,...)
- we've checked CP secureknowledge, gave no solution
- we've checked Nokia Support, no solution
- I've read on CPUG forums that the UnixInstallScript of
HFA04 has some
problems with flash based systems, anybody experienced this
?
- we didn't try to use the "old" way yet : unpack
the
VPN-1_R60_HFA_04_wrapper.ipso.tgz file, cd CPvpn, unpack the
fw1_R60_HFA.tgz file, and run the installer for that,
anybody tried this
?
- has anybody tried to install HFA04 through smartupdate,
possibly that
gives no problems at all, might be our last resort...

Thanks !

Joeri

 


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

hi,

there is a special flash-HFA ... did you use that?

br
reinhard

At 14:09 23.11.2006, you wrote:
>Hi,
>
>Can anybody outline the correct procedure to get HFA04
installed on a
>flash based Nokia system ? What we've done so far:
>
>- yes, it's in the release notes of HFA04, but doesn't
work (making
>softlinks,...)
>- we've checked CP secureknowledge, gave no solution
>- we've checked Nokia Support, no solution
>- I've read on CPUG forums that the UnixInstallScript of
HFA04 has some
>problems with flash based systems, anybody experienced
this ?
>- we didn't try to use the "old" way yet :
unpack the
>VPN-1_R60_HFA_04_wrapper.ipso.tgz file, cd CPvpn, unpack
the
>fw1_R60_HFA.tgz file, and run the installer for that,
anybody tried this
>?
>- has anybody tried to install HFA04 through
smartupdate, possibly that
>gives no problems at all, might be our last resort...
>
>Thanks !
>
>Joeri
>
>
>
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERVamadeus.us.checkpoint.com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http:
//www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-ownerts.checkpoint.com
>=================================================

-- 
Reinhard Stich          r.stichinternet-security.at
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hi,

No, because it doesn't seem to be available for download in
the CP
download section, there's only 1 general HFA04 package over
there...

Regards,

Joeri 

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of
Reinhard Stich
Sent: donderdag 23 november 2006 14:23
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: Re: [FW-1] Flash based Nokia - IPSO 4.1 - R60 HFA04

hi,

there is a special flash-HFA ... did you use that?

br
reinhard

At 14:09 23.11.2006, you wrote:
>Hi,
>
>Can anybody outline the correct procedure to get HFA04
installed on a 
>flash based Nokia system ? What we've done so far:
>
>- yes, it's in the release notes of HFA04, but doesn't
work (making
>softlinks,...)
>- we've checked CP secureknowledge, gave no solution
>- we've checked Nokia Support, no solution
>- I've read on CPUG forums that the UnixInstallScript of
HFA04 has some

>problems with flash based systems, anybody experienced
this ?
>- we didn't try to use the "old" way yet :
unpack the 
>VPN-1_R60_HFA_04_wrapper.ipso.tgz file, cd CPvpn, unpack
the 
>fw1_R60_HFA.tgz file, and run the installer for that,
anybody tried 
>this ?
>- has anybody tried to install HFA04 through
smartupdate, possibly that

>gives no problems at all, might be our last resort...
>
>Thanks !
>
>Joeri
>
>
>
>
>=================================================
>To set vacation, Out-Of-Office, or away messages, send
an email to 
>LISTSERVamadeus.us.checkpoint.com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http:
//www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
subscription options, 
>email fw-1-ownerts.checkpoint.com 
>=================================================

-- 
Reinhard Stich          r.stichinternet-security.at
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 

=================================================
To set vacation, Out-Of-Office, or away messages, send an
email to
LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription
options,
email fw-1-ownerts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

On Thu, 23 Nov 2006, Barbier, Joeri wrote:

> Can anybody outline the correct procedure to get HFA04
installed on a
> flash based Nokia system ?

If memory serves me well you have to install R60+HFA04 as
package.

It is one of the reasons I do not like these flash based
units. (Getting 
them to run out of diskspace is another one.)

Hugo.

-- 
	hvdkooijvanderkooij.org	http://hvdkooij.xs4all.nl/

	    This message is using 100% recycled electrons.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hugo ...


'Ere some info that's hopefully helpful ...


Prerequisites for Nokia IP265 Machines:
• For IP265 HFA Installation Instructions see article
1410143 on Nokia's 
site.
• Install the latest NGX R60 bootsrap script. Perform the
installation 
according to the
instructions in sk31660.
• IP265 Flash-based machine with an external flash
(optional disk) that 
has been
configured for type "Packages".
Verifying and/or Creating the Soft Link File
You must perform the following step prior to performing the
automatic 
installation
procedure. This is to insure that the correct soft link file
exists in the 
installation directory.
1) Change directory to '/preserve/opt/packages/installed'.
2) Verify that the files fw1_r60_591000xxx_1_IPSO.tgz and
CPsuite.tgz 
exist, where
xxx indicates the original installed build number.
3) If ‘CPsuite.tgz’ does not exist in this directory,
create it using the 
following command.
ln -sf fw1_R60_591000xxx_1_IPSO.tgz CPsuite.tgz
Pre-Installation Steps
1) Remove the contents of the '/var/tmp' directory in
preparation for the 
HFA
installation. To do this, run the following commands:
cd /var/tmp
rm -R *
2) Create a new directory under '/var' to temporarily store
the HFA 
installation archive
and files. For example, run the following command:
mkdir /var/hfa
3) Download the HFA comprehensive package file
(VPN-1_R60_HFA_04_wrapper.ipso.tgz) to the directory created
in the 
preceding step.
IMPORTANT NOTE: Do not use the directory '/var/admin'!
4) Extract the contents of
VPN-1_R60_HFA_04_wrapper.ipso.tgz.
5) Optionally, remove the archive (.tgz) file, as this is no
longer 
needed.
6) Back up the current VPN-1 Pro/Express package 
fw1_R60_591000xxx_1_IPSO.tgz
and/or CPsuite.tgz. Copy the VPN-1 Pro/Express file from
/preserve/opt/
packages/installed to another backup location (but not on
the same 
machine).
NOTE: You will need this file in order to revert to the
previous version.
7) Run UnixInstallScript.


For Non IP265 appliances only as follows:
1.    Ensure that the '/preserve/opt/tmp' directory is empty
and if not 
remove the contents in prepartation for the HFA
installation.
2.    Create a new directory under '/var' to temporarily
store the HFA 
installation archive and files.  For example:
    nokia[admin]# mkdir /var/hfa
3.    FTP the HFA archive file to the directory created in
the above step. 
 IMPORTANT NOTE: Do not use the directory '/var/admin'!
4.    Unpack the HFA archive file using 'gunzip' or 'tar'
    nokia[admin]# tar xfvz [HFA Archive filename]
5.    Once unpacked remove the archive (.tgz) file as this
is no longer 
needed.
    nokia[admin]# rm [HFA Archive filename]
6.    Install the HFA per the instructions provided in the
HFA Release 
Notes.
    Below is an example of a NGX HFA_02 installation
    1.    Ensure that the '/preserve/opt/tmp' directory is
empty and if 
not remove the contents in prepartation for the HFA
installation.
    2.    Create a new directory under '/var' to temporarily
store the HFA 
installation archive.  For example:
        nokia[admin]# mkdir /var/hfa
    3.    Download the NGX HFA_02 Comprehensive Package for
IPSO 
(Comprehensive_R60_HFA_02.ipso.tgz)
    4.    FTP the HFA archive file to the directory created
in the above 
step.
    5.    Unpack the HFA archive file using 'gunzip' or
'tar'
        nokia[admin]# tar xfvz
Comprehensive_R60_HFA_02.ipso.tgz
    6.    Unpack the file 'fw1_R60_HFA_02.ipso.tgz'
        nokia[admin]# tar xfvz fw1_R60_HFA_02.ipso.tgz
    7.    Once unpacked remove the NGX HFA_02 Comprehensive
Package 
archive (.tgz) file as this is no longer needed.
        nokia[admin]# rm Comprehensive_R60_HFA_02.ipso.tgz
    8.     Invoke the HFA installation process with the
command:
        nokia[admin]# ./fw1_HOTFIX_R60_02_591602003_1

Note - Make sure that you reboot the machine after the
installation 
completes.  During the reboot the directory created will be
removed.


Cheers ...

Andrew ;->

------------------------------------------------------------
------------------------------------------------------------
--------------------------------------------------------
This is a PRIVATE message. If you are not the intended
recipient, please 
delete without copying and kindly advise us by e-mail of the
mistake in 
delivery. NOTE: Regardless of content, this e-mail shall not
operate to 
bind CSC to any order or other contract unless pursuant to
explicit 
written agreement or government initiative expressly
permitting the use of 
e-mail for such purpose.
------------------------------------------------------------
------------------------------------------------------------
--------------------------------------------------------




Hugo van der Kooij <hvdkooijVANDERKOOIJ.ORG> 
Sent by: Mailing list for discussion of Firewall-1 
<FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM>
23/11/2006 13:48
Please respond to
Mailing list for discussion of Firewall-1 
<FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM>


To
FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
cc

Subject
Re: [FW-1] Flash based Nokia - IPSO 4.1 - R60 HFA04






On Thu, 23 Nov 2006, Barbier, Joeri wrote:

> Can anybody outline the correct procedure to get HFA04
installed on a
> flash based Nokia system ?

If memory serves me well you have to install R60+HFA04 as
package.

It is one of the reasons I do not like these flash based
units. (Getting 
them to run out of diskspace is another one.)

Hugo.

-- 
                 hvdkooijvanderkooij.org            
   
http://hvdkooij.xs4all.nl/

                     This message is using 100% recycled
electrons.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================