[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] RE: RE: (FW1) Moving FW1 gateway
AFAIK it is only supported on Suns. They have a hostid coded in their firmware. Checkpoint (and others) have licensed based on this for a long time. There are programs available for setting the hostid dynamically to permit moving to a new platform without having to hassle with a new license. It is no less secure than licensing on IP address when that can be an private address that can be re-used or even an unused interface that can be duplicated on multiple machines. Jim -----Original Message----- From: [email protected] [mailto:[email protected]]On Behalf Of Murphy, Paul Sent: Friday, 29 September 2000 4:05 a.m. To: '[email protected]'; [email protected] Subject: [FW1] RE: RE: (FW1) Moving FW1 gateway Ooops.... how long has this been an option? Doesn't this defeat the licencing mechanism altogether? Paul. -----Original Message----- From: [email protected] [mailto:[email protected]] Sent: 28 September 2000 16:21 To: [email protected]; [email protected]; [email protected] Subject: Re:RE: (FW1) Moving FW1 gateway Unless you license by host id. Yim ____________________Reply Separator____________________ Subject: RE: (FW1) Moving FW1 gateway Author: "Murphy; Paul" <SMTP:[email protected]> Date: 9/28/00 7:00 AM Something isn't right here. Checkpoint FW1 products need to be installed with a licence key. This key is generated at the http://licence.checkpoint.com site, and is built from the IP address of the Firewall and the Certificate key that comes with the Firewall product. If you have changed the IP address, then you need a new key. I can't understand how you have managed to get *any* data through the firewall. The key generation is processed manually for IP address changes as you have to include a reason for the change, and may have to provide some statement that you are not contravening the licence. This can take time, but can often be speeded up if your Checkpoint supplier vouches for you. Paul. -----Original Message----- From: raed al-tamim [mailto:[email protected]] Sent: 27 September 2000 05:09 To: [email protected] Subject: [FW1] Moving FW1 gateway Hello all, We have FW1 with VPN running on a Solaris 2.6 server, this last weekend we had to move to a new location with a different ISP, and I had to change the IP addresses (external and internal) to the FW. After the move, it seems that I can only get out with some applications, but nothing can get into the LAN side. I have changed the IP addresses on the FW1 network objects to the new ones, I have even deleted the network object, deleted the role, and re-created it for some applications but still no luck. Can any one help me find out what I need to do to get things back on-line. I asked the person who installed it if he had to compile the IP address of either the external or internal interface when he installed into any key or certificate but he said no, and I can't find a document from checkpoint that talks about moving to a different network or compiling the IP into any key. Thanks for any help, Raed Al-Tamim ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ---------------------------------------------------------------------------- ---- --------------------------------------- This e-mail is intended only for the above addressee. It may contain privileged information. If you are not the addressee you must not copy, distribute, disclose or use any of the information in it. If you have received it in error please delete it and immediately notify the sender. evolvebank.com is a division of Lloyds TSB Bank plc. Lloyds TSB Bank plc, 71 Lombard Street, London EC3P 3BS. Registered in England, number 2065. Telephone No: 020 7626 1500 Lloyds TSB Scotland plc, Henry Duncan House, 120 George Street, Edinburgh EH2 4LH. Registered in Scotland, number 95237. Telephone No:Lloyds TSB Bank plc and Lloyds TSB Scotland plc are regulated by the Personal Investment Authority and represent only the Scottish Widows and Lloyds TSB Marketing Group for life assurance, pensions and investment business. Members of the UK Banking Ombudsman Scheme and signatories to the UK Banking Code. ---------------------------------------------------------------------------- ---- --------------------------------------- ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ---------------------------------------------------------------------------- ----- This e-mail is intended only for the above addressee. It may contain privileged information. If you are not the addressee you must not copy, distribute, disclose or use any of the information in it. If you have received it in error please delete it and immediately notify the sender. evolvebank.com is a division of Lloyds TSB Bank plc. Lloyds TSB Bank plc, 71 Lombard Street, London EC3P 3BS. Registered in England, number 2065. Telephone No: 020 7626 1500 Lloyds TSB Scotland plc, Henry Duncan House, 120 George Street, Edinburgh EH2 4LH. Registered in Scotland, number 95237. Telephone No:Lloyds TSB Bank plc and Lloyds TSB Scotland plc are regulated by the Personal Investment Authority and represent only the Scottish Widows and Lloyds TSB Marketing Group for life assurance, pensions and investment business. Members of the UK Banking Ombudsman Scheme and signatories to the UK Banking Code. ---------------------------------------------------------------------------- ------ ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|