Re: Urgent help needed: Reason: Load on Module failed - failed to load Security Policy"

That's really weird.  I have another identical system with
P-1 NGx R61 
  and SPLAT enforcement module NGx R61 as well.  I have the
hostname
  as SPLATFW and everything works.  Why?
   
  I still have issues on the NG AI R55 with HFA_20 system. 
Furthermore,
  I spoke to two different Checkpoint TAC engineers and they
have never
  heard of such thing as having ALL upper case characters in
the
  hostname.  Are you sure about this Hugo?  Thanks.

Hugo van der Kooij <hvdkooijVANDERKOOIJ.ORG> wrote:
  On Sat, 25 Aug 2007, cisco4ng wrote:

> [ExpertFW]# fw fetch -n 192.168.1.1
> Fetching Security Policy From: 192.168.1.1
> Management rejected fetch for this module - sic name
does not match.
> Policy Fetch Failed
> [ExpertFW]#

Do NOT use upercase characters in hostnames. Unix is case
sensitives and 
consideres and all capital words will results in odd things
as you have 
just seen.

Want more fun. Create a user with a name all in capitals and
try to login 
as that user. The system will decide you got one of those
really old 
terminal that can handle only capitals start translating for
you.

So in short. Your host has the wrong name and everything
else after that 
is just asking for trouble. So restart the exercise with a
acceptable 
hostname.

Hugo.

-- 
hvdkooijvanderkooij.org http://hugo.vanderkooij.
org/
This message is using 100% recycled electrons.

Some men see computers as they are and say
"Windows"
I use computers with Linux and say "Why Windows?"
(Thanks JFK, for this quote of George Bernard Shaw.)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================


       
---------------------------------
Sick sense of humor? Visit Yahoo! TV's Comedy with an Edge
to see what's on, when. 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

On Sun, 26 Aug 2007, cisco4ng wrote:

> That's really weird.  I have another identical system
with P-1 NGx R61
>  and SPLAT enforcement module NGx R61 as well.  I have
the hostname
>  as SPLATFW and everything works.  Why?

Because you are lucky? But using "FW" is asking
for trouble. It is 
ill-advised to use uppercase hostnames on any unix system I
have worked 
on over the past 15 years.

Using reserved words is another thing you want to avoid.

So challenge it all you want. But I am not the one with the
problem.

Hugo.

-- 
 	hvdkooijvanderkooij.org	http://hugo.vanderkooij.
org/
 	    This message is using 100% recycled electrons.

 	Some men see computers as they are and say
"Windows"
 	I use computers with Linux and say "Why
Windows?"
 	(Thanks JFK, for this quote of George Bernard Shaw.)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

I once saw those two error messages on the same deployment
with problems,
but it was quite a while ago:

Load on Module failed - failed to load Security
Policy"
Management rejected fetch for this module - sic name does
not match.

To be honest I don't remember the exact version I was trying
to install, but
it could have happened around 2 years ago.

I end up completely reinstalling the firewall module from
scratch with a
different (simpler) hostname and that solved the problem.
Back then I
decided to go with that because of the "sic name does
not match" message,
but now that Hugo says something about problems with
uppercase letters, it
might have had something to do with it.

Since it is SPLAT, it would take you just a few minutes to
format and
reinstall the firewall module, so I guess it would be a good
try, since you
have wasted hours with the issue.

Regards


On 8/26/07, Hugo van der Kooij <hvdkooijvanderkooij.org> wrote:
>
> On Sun, 26 Aug 2007, cisco4ng wrote:
>
> > That's really weird.  I have another identical
system with P-1 NGx R61
> >  and SPLAT enforcement module NGx R61 as well.  I
have the hostname
> >  as SPLATFW and everything works.  Why?
>
> Because you are lucky? But using "FW" is
asking for trouble. It is
> ill-advised to use uppercase hostnames on any unix
system I have worked
> on over the past 15 years.
>
> Using reserved words is another thing you want to
avoid.
>
> So challenge it all you want. But I am not the one with
the problem.
>
> Hugo.
>
> --
>         hvdkooijvanderkooij.org        http://hugo.vanderkooij.
org/
>             This message is using 100% recycled
electrons.
>
>         Some men see computers as they are and say
"Windows"
>         I use computers with Linux and say "Why
Windows?"
>         (Thanks JFK, for this quote of George Bernard
Shaw.)
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>



-- 
Sergio Alvarez
(506)8301342

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================