Had a similar issue and the solution was to reset specific
SmartDefense
settings which conflicts with the R65 version, here the
solution:
Please try the following:
1) Make backup of conf directory or do full backup.
2) Stop any SmartConsole applications
3) Open GUIDBedit Tool
4) In GUIDBedit:
>From Table > Other > Inspect
remove inspect objects:
welchia_icmp_block_code
cisco_ios_dos_inspect_code
SDU_log_func copyright_note
>From Table > Managed Objects > asm >
AdvancedSecurityObject >
asm_update_version change value to 1.
This will allow an update of SmartDefense signatures to
occur the next
time an update is requested via SmartDashboard.
It was working for me !
regards
Peter Gruehling
"Kesper, Olav" <Olav_Kesper THEIS-FALTSCHACHTELN.DE>
Sent by: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM>
30.08.2007 11:53
Please respond to
Mailing list for discussion of Firewall-1
<FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM>
To
FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
cc
Subject
Re: [FW-1] upgrade_import Problems from R55 to R65
Do you have used the command "upgrade_export" on
the old box?
The result is a tarball with the configuration ready for use
with the
"upgrade_import" tool on the new box.
Olav
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf
> Of Crist Clark
> Sent: Wednesday, August 29, 2007 11:23 PM
> To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
> Subject: [FW-1] upgrade_import Problems from R55 to
R65
>
> I appear to be having some trouble upgrading a
SmartCenter
> from R55 to R65. I'm installing R65 on a fresh system
choosing the
> upgrade option. I have a gzipped tarball from the R55
server, and the
> installation appears to go without a problem. No
ominous
> messages during the install or that I can find in the
CPInstLog
> directory.
>
> However, when I go to install a policy on an R55
enforcement module,
> it fails to compile. The details are,
>
> Installation Targets Version
Policy Type
Details
> globalstar-fw-1 NG AI
Advanced
> Security
internet-firewalls-combined:
> globalstar-fw-1 NG AI
Advanced
> Security "/opt/CPngcmp-R65/conf/updates.def",
line
> 5654: ERROR: cannot find
<ADP_ENABLE_SMB_RENAME_LOG> anywhere
> globalstar-fw-1 NG AI
Advanced
> Security "/opt/CPngcmp-R65/conf/updates.def",
line
> 5700: ERROR: cannot find
<ADP_ENABLE_SMB_TRANS_LOG> anywhere
> globalstar-fw-1 NG AI
Advanced
> Security
"/opt/CPngcmp-R65/lib/asm_dynamic_props.def",
> line 109: ERROR: cannot find
<smb_trans_block_code> anywhere
> globalstar-fw-1 NG AI
Advanced
> Security Compilation
failed.
> globalstar-fw-1 NG AI
Advanced
> Security Operation ended
with errors.
>
> The complaints are about files in the R55 compatibility
package.
> So I'm think there is something wrong with the import.
I haven't
> touched the rule base. Just trying to install exactly
what was
> imported. Not finding help in the documentation. Ideas
on how to
> fix this?
>
>
> B¼information contained in this e-mail message is
> confidential, intended
> only for the use of the individual or entity named
above. If
> the reader
> of this e-mail is not the intended recipient, or the
employee or agent
> responsible to deliver it to the intended recipient,
you are hereby
> notified that any review, dissemination, distribution
or
> copying of this
> communication is strictly prohibited. If you have
received this e-mail
> in error, please contact postmasterglobalstar.com
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>
This e-mail message (including any attachments) contains
information that
may be confidential, or constitute non-public information.
It is intended
to be conveyed only to the designated recipient(s). If you
are not an
intended recipient of this message, please notify the sender
by replying
to this message and then delete it from your system. Use,
dissemination,
distribution, or reproduction of this message by unintended
recipients is
not authorized and may be unlawful.
Artur Theis GmbH & Co. KG - Faltschachteln:
Erfuellungsort für Zahlungen und Gerichtsstand ist Wuppertal
- USt-IdNr.:
DE121027384 - Steuer-Nr.: 5131 / 5848 / 0115. Die
Gesellschaft ist eine
Kommanditgesellschaft mit Sitz in Wuppertal, Amtsgericht
Wuppertal HRA
12424. Persoenlich haftende Gesellschafterin Artur Theis
Beteiligungs GmbH
mit Sitz in Wuppertal, Amtsgericht Wuppertal HRB 6945.
Geschäftsfuehrer:
D. Schroeder, J. Munzel
Theis GmbH & Co. KG - Faltschachtelfabrik:
Erfuellungsort für Zahlungen und Gerichtsstand ist Berlin -
USt-IdNr.:
DE136653221 - Steuer-Nr.: 30 / 066 / 5738. Die Gesellschaft
ist eine
Kommanditgesellschaft mit Sitz in Berlin, Registergericht
Charlottenburg
91, HRA 21054. Persoenlich haftende Gesellschafterin
Theis-Verwaltungs-GmbH in Berlin, Amtsgericht
Registergericht
Charlottenburg 93, HRA 25810. Geschäftsfuehrer: D.
Schroeder, J. Munzel
--------------------
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================
</PRE>
<div
style="font-family:arial;font-size:8pt;">
<hr>
<p>
DANA INVESTMENT GmbH<br>
Postfach 1909 89209 Neu-Ulm<br>
HRB 11 072 Memmingen<br>
Geschaeftsfuehrer: Cornelia von Kuensberg, Juergen Wald
</p>
<p>This e-mail, and any attachments, is intended
solely for use by the addressee(s) named above. It may
contain the confidential or proprietary information of Dana
Corporation, its subsidiaries, affiliates or business
partners. If you are not the intended recipient of this
e-mail or are an unauthorized recipient of the information,
you are hereby notified that any dissemination, distribution
or copying of this e-mail or any attachments, is strictly
prohibited. If you have received this e-mail in error,
please immediately notify the sender by reply e-mail and
permanently delete the original and any copies or
printouts.</p>
<p>Computer viruses can be transmitted via email. The
recipient should check this e-mail and any attachments for
the presence of viruses. Dana Corporation accepts no
liability for any damage caused by any virus transmitted by
this e-mail.</p>
English, Francais, Espanol, Deutsch, Italiano,
Portugues:<br>
<a href="http://www.dana.com/overview/EmailDisclaimer.shtm"
;>http://www.dana.com/overview/EmailDisclaimer.shtm</a
>
<hr>
</div>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================
|
>>> On 8/30/2007 at 4:43 AM,
<Peter.GruehlingDANA.COM> wrote:
> Had a similar issue and the solution was to reset
specific
SmartDefense
> settings which conflicts with the R65 version, here the
solution:
>
> Please try the following:
> 1) Make backup of conf directory or do full backup.
> 2) Stop any SmartConsole applications
> 3) Open GUIDBedit Tool
> 4) In GUIDBedit:
> From Table > Other > Inspect
> remove inspect objects:
>
> welchia_icmp_block_code
> cisco_ios_dos_inspect_code
> SDU_log_func copyright_note
>
> From Table > Managed Objects > asm >
AdvancedSecurityObject >
> asm_update_version change value to 1.
>
> This will allow an update of SmartDefense signatures to
occur the
next
> time an update is requested via SmartDashboard.
>
> It was working for me !
Thanks. Your message set me down the right track. Simply
going into
GUIDBedit and resetting the "asm_update_version"
so that I could then
reload the SmartDefense definitions was enough.
So again, I went into "Table> Managed Objects>
asm>
AdvancedSecurityObject>
asm_update_version" and changed the value to 1. Then I
started
SmartDashboard, went to the SmartDefense tab, and hit
"Online Update."
After loading the update, viola! Problem fixed.
> "Kesper, Olav" <Olav_KesperTHEIS-FALTSCHACHTELN.DE>
> Sent by: Mailing list for discussion of Firewall-1
> <FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM>
> 30.08.2007 11:53
> Please respond to
> Mailing list for discussion of Firewall-1
> <FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM>
>
>
> To
> FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
> cc
>
> Subject
> Re: [FW-1] upgrade_import Problems from R55 to R65
>
>
>
>
>
>
> Do you have used the command "upgrade_export"
on the old box?
> The result is a tarball with the configuration ready
for use with the
> "upgrade_import" tool on the new box.
>
> Olav
>
>> -----Original Message-----
>> From: Mailing list for discussion of Firewall-1
>> [mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf
>> Of Crist Clark
>> Sent: Wednesday, August 29, 2007 11:23 PM
>> To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
>> Subject: [FW-1] upgrade_import Problems from R55 to
R65
>>
>> I appear to be having some trouble upgrading a
SmartCenter
>> from R55 to R65. I'm installing R65 on a fresh
system choosing the
>> upgrade option. I have a gzipped tarball from the
R55 server, and
the
>> installation appears to go without a problem. No
ominous
>> messages during the install or that I can find in
the CPInstLog
>> directory.
>>
>> However, when I go to install a policy on an R55
enforcement
module,
>> it fails to compile. The details are,
>>
>> Installation Targets Version
Policy Type
> Details
>> globalstar-fw-1 NG AI
Advanced
>> Security
internet-firewalls-combined:
>> globalstar-fw-1 NG AI
Advanced
>> Security
"/opt/CPngcmp-R65/conf/updates.def", line
>> 5654: ERROR: cannot find
<ADP_ENABLE_SMB_RENAME_LOG> anywhere
>> globalstar-fw-1 NG AI
Advanced
>> Security
"/opt/CPngcmp-R65/conf/updates.def", line
>> 5700: ERROR: cannot find
<ADP_ENABLE_SMB_TRANS_LOG> anywhere
>> globalstar-fw-1 NG AI
Advanced
>> Security
"/opt/CPngcmp-R65/lib/asm_dynamic_props.def",
>> line 109: ERROR: cannot find
<smb_trans_block_code> anywhere
>> globalstar-fw-1 NG AI
Advanced
>> Security Compilation
failed.
>> globalstar-fw-1 NG AI
Advanced
>> Security Operation
ended with errors.
>>
>> The complaints are about files in the R55
compatibility package.
>> So I'm think there is something wrong with the
import. I haven't
>> touched the rule base. Just trying to install
exactly what was
>> imported. Not finding help in the documentation.
Ideas on how to
>> fix this?
B¼information contained in this e-mail message is
confidential, intended
only for the use of the individual or entity named above. If
the reader
of this e-mail is not the intended recipient, or the
employee or agent
responsible to deliver it to the intended recipient, you are
hereby
notified that any review, dissemination, distribution or
copying of this
communication is strictly prohibited. If you have received
this e-mail
in error, please contact postmasterglobalstar.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================
|
