[FW1] Adding new modules to management station - risks with Putkey?

[simon.devlin@FW1-NOSPAMuk.abnamro.com]

Hi all.

Next week I'm going to have to introduce an additional two Nokia 650's into
our environment.  Whilst I'm happy with the day to day stuff, this will be
the first time I've installed brand new devices (other than in single g/w
configurations).

To interact with our existing management station, I understand that I will
need to go through the "fw putkey" procedure across all the firewall
modules to be managed (this will increase the number to eight).  My
question is in the event that this procedure does not go smoothly, what
could be the impact on the existing modules?  Presuambly they'd continue to
enforce their currently loaded policy, but logging and futher policy
fetches from the management station would fail until the password
synchronization was completed successfully?

I guess the question is, what could break, and what's the best way to
minimize the risk?

Regards




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================