SPLAT and activating Checkpoint Synchronization.

Scenario:  I have a Provider-1 NG AI R55 with HFA_20
and a SPLAT enforcement module.  Everything is running
on eval license.
   
  Initially when I run "sysconfig" on the SPLAT
during
initial build of the SPLAT, it prompted me if I want
to install Checkpoint Synchronization, I select
"NO"
because I only a single SPLAT enforcement module
at that time.
   
  Because of new requirements, I am going to add another
firewall running Active/Active and therefore I will
need to have Checkpoint Synchronization on the 
original Enforcement Module.  
   
  Is it possible to activate checkpoint synchronization
on the original SPLAT Enforcement Module without
having to rebuild the original firewall from scratch?
   
  Thanks.
   

       
---------------------------------
Looking for a deal? Find great prices on flights and hotels
with Yahoo! FareChase.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Yes. You should see this option from cpconfig, #7.

-GS

fwgs[admin]# cpconfig
This program will let you re-configure
your Check Point products configuration.


Configuration Options:
----------------------
(1)  Licenses
(2)  SNMP Extension
(3)  Group Permissions
(4)  PKCS#11 Token
(5)  Random Pool
(6)  Secure Internal Communication
(7)  Disable cluster membership for this gateway
(8)  Disable Check Point SecureXL
(9)  Automatic start of Check Point Products

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of
cisco4ng
Sent: Tuesday, August 28, 2007 10:55 AM
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] SPLAT and activating Checkpoint
Synchronization.

Scenario:  I have a Provider-1 NG AI R55 with HFA_20
and a SPLAT enforcement module.  Everything is running
on eval license.
   
  Initially when I run "sysconfig" on the SPLAT
during
initial build of the SPLAT, it prompted me if I want
to install Checkpoint Synchronization, I select
"NO"
because I only a single SPLAT enforcement module
at that time.
   
  Because of new requirements, I am going to add another
firewall running Active/Active and therefore I will
need to have Checkpoint Synchronization on the 
original Enforcement Module.  
   
  Is it possible to activate checkpoint synchronization
on the original SPLAT Enforcement Module without
having to rebuild the original firewall from scratch?
   
  Thanks.
   

       
---------------------------------
Looking for a deal? Find great prices on flights and hotels
with Yahoo!
FareChase.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hi

You can enable cluster membership by running cpconfig and
selecting the
option "Enable cluster membership for this
gateway". This will require a
reboot to enable.

This will enable the clusterxl / sync subsystem.

Matthew Odendaal

Information Security Architects (Pty) Ltd
matthewisa.co.za
 

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of
cisco4ng
Sent: 28 August 2007 04:55 PM
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] SPLAT and activating Checkpoint
Synchronization.

Scenario:  I have a Provider-1 NG AI R55 with HFA_20
and a SPLAT enforcement module.  Everything is running
on eval license.
   
  Initially when I run "sysconfig" on the SPLAT
during
initial build of the SPLAT, it prompted me if I want
to install Checkpoint Synchronization, I select
"NO"
because I only a single SPLAT enforcement module
at that time.
   
  Because of new requirements, I am going to add another
firewall running Active/Active and therefore I will
need to have Checkpoint Synchronization on the 
original Enforcement Module.  
   
  Is it possible to activate checkpoint synchronization
on the original SPLAT Enforcement Module without
having to rebuild the original firewall from scratch?
   
  Thanks.
   

       
---------------------------------
Looking for a deal? Find great prices on flights and hotels
with Yahoo!
FareChase.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Cpconfig
Sent via BlackBerry by AT&T

-----Original Message-----
From: cisco4ng <cisco4ngYAHOO.COM>

Date:         Tue, 28 Aug 2007 07:54:36 
To:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] SPLAT and activating Checkpoint
Synchronization.


Scenario:  I have a Provider-1 NG AI R55 with HFA_20
and a SPLAT enforcement module.  Everything is running
on eval license.
   
  Initially when I run "sysconfig" on the SPLAT
during
initial build of the SPLAT, it prompted me if I want
to install Checkpoint Synchronization, I select
"NO"
because I only a single SPLAT enforcement module
at that time.
   
  Because of new requirements, I am going to add another
firewall running Active/Active and therefore I will
need to have Checkpoint Synchronization on the 
original Enforcement Module.  
   
  Is it possible to activate checkpoint synchronization
on the original SPLAT Enforcement Module without
having to rebuild the original firewall from scratch?
   
  Thanks.
   

       
---------------------------------
Looking for a deal? Find great prices on flights and hotels
with Yahoo! FareChase.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================