I had the same install error after upgrading from R55 to
R60, no config
changes were made after the upgrade. Come to find out some
hosts were
defined as web servers and were being used under web
intelligence.
Adding an eval or removing the web server host allowed for a
successful
push. To add, I also have another license case where the
web
intelligence licenses are not working, CP was able to
recreate this one
and we are waiting on a fix.
-GS
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AMADEUS.US.CHECKPOINT.COM]
On Behalf Of
cisco4ng
Sent: Monday, August 27, 2007 1:13 PM
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: Re: [FW-1] Urgent help needed: Reason: Load on
Module failed -
failed to load Security Policy"
I found out what the problem is. It has nothing to do with
hostname
in upper case characters (as confirmed to me by Checkpoint
TAC)
and by my company Linux/Unix gurus.
I traced it down to be a corrupted eval license string.
Once I removed
the 1-month eval license (I am back to 15-days eval license
on the
SPLAT module), everything works after that.
I then get another EVAL license and applied it to both the
CMA and
the SPLAT enforcement module. I was able to push policy
after that
without any problems.
Thanks again everyone for your input.
Sergio Alvarez <seralvarGMAIL.COM> wrote: I once
saw those two error
messages on the same deployment with problems,
but it was quite a while ago:
Load on Module failed - failed to load Security
Policy"
Management rejected fetch for this module - sic name does
not match.
To be honest I don't remember the exact version I was trying
to install,
but
it could have happened around 2 years ago.
I end up completely reinstalling the firewall module from
scratch with a
different (simpler) hostname and that solved the problem.
Back then I
decided to go with that because of the "sic name does
not match"
message,
but now that Hugo says something about problems with
uppercase letters,
it
might have had something to do with it.
Since it is SPLAT, it would take you just a few minutes to
format and
reinstall the firewall module, so I guess it would be a good
try, since
you
have wasted hours with the issue.
Regards
On 8/26/07, Hugo van der Kooij wrote:
>
> On Sun, 26 Aug 2007, cisco4ng wrote:
>
> > That's really weird. I have another identical
system with P-1 NGx
R61
> > and SPLAT enforcement module NGx R61 as well. I
have the hostname
> > as SPLATFW and everything works. Why?
>
> Because you are lucky? But using "FW" is
asking for trouble. It is
> ill-advised to use uppercase hostnames on any unix
system I have
worked
> on over the past 15 years.
>
> Using reserved words is another thing you want to
avoid.
>
> So challenge it all you want. But I am not the one with
the problem.
>
> Hugo.
>
> --
> hvdkooijvanderkooij.org http://hugo.vanderkooij.
org/
> This message is using 100% recycled
electrons.
>
> Some men see computers as they are and say
"Windows"
> I use computers with Linux and say "Why
Windows?"
> (Thanks JFK, for this quote of George Bernard
Shaw.)
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>
--
Sergio Alvarez
(506)8301342
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================
---------------------------------
Need a vacation? Get great deals to amazing places on Yahoo!
Travel.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================
|
