Re: SPLAT and activating Checkpoint Synchronization.

Thank you.  However, this requires that I have to select
"YES" when I run
sysconfig and have install checkpoint synchronization,
correct?

My question is that during the initial
"sysconfig", I select "NO" when asked
about installing Checkpoint synchronization.  Later on, I
need checkpoint
synchronization, is it possible to install this feature
WITHOUT rebuilding the
whole box?  Thanks.

I assumed "(7)  Disable cluster membership for this
gateway" is available
only if you have checkpoint sychronization installed? 

David

Gary Scott <gscottVIGILAR.COM> wrote: Yes. You should see
this option from cpconfig, #7.

-GS

fwgs[admin]# cpconfig
This program will let you re-configure
your Check Point products configuration.


Configuration Options:
----------------------
(1)  Licenses
(2)  SNMP Extension
(3)  Group Permissions
(4)  PKCS#11 Token
(5)  Random Pool
(6)  Secure Internal Communication
(7)  Disable cluster membership for this gateway
(8)  Disable Check Point SecureXL
(9)  Automatic start of Check Point Products

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of
cisco4ng
Sent: Tuesday, August 28, 2007 10:55 AM
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] SPLAT and activating Checkpoint
Synchronization.

Scenario:  I have a Provider-1 NG AI R55 with HFA_20
and a SPLAT enforcement module.  Everything is running
on eval license.
   
  Initially when I run "sysconfig" on the SPLAT
during
initial build of the SPLAT, it prompted me if I want
to install Checkpoint Synchronization, I select
"NO"
because I only a single SPLAT enforcement module
at that time.
   
  Because of new requirements, I am going to add another
firewall running Active/Active and therefore I will
need to have Checkpoint Synchronization on the 
original Enforcement Module.  
   
  Is it possible to activate checkpoint synchronization
on the original SPLAT Enforcement Module without
having to rebuild the original firewall from scratch?
   
  Thanks.
   

       
---------------------------------
Looking for a deal? Find great prices on flights and hotels
with Yahoo!
FareChase.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================


       
---------------------------------
Building a website is a piece of cake. 
Yahoo! Small Business gives you all the tools to get
online.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

cisco4ng wrote:
> Thank you.  However, this requires that I have to
select "YES" when I run
> sysconfig and have install checkpoint synchronization,
correct?

wrong.

> 
> My question is that during the initial
"sysconfig", I select "NO" when asked
> about installing Checkpoint synchronization.  Later on,
I need checkpoint
> synchronization, is it possible to install this feature
WITHOUT rebuilding the
> whole box?  Thanks.
> 

yes. see below.

> I assumed "(7)  Disable cluster membership for
this gateway" is available
> only if you have checkpoint sychronization installed? 
> 

for a gateway not a cluster member already, option 7 of
cpconfig looks 
like this:

(7)  Enable cluster membership for this gateway


tested on r60, but it should probably be the same with r55.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================