[ahreece]

I have run into an exaperating problem involving a CheckPoint Enterprise install. The envrionment is a Sun Enterprise 450 multiprocessor with 3 Gigs of memory and running Solaris 8 (02/04 Edition). There are 7 quad ethernets (not my idea). There are two 36 gig hard drives that are mirrored using DiskSuite4.2.1. It is a locked down Solaris install using minimum packages based on Lance Spitzner's guidelines. I also installed the latest Sun Cluster patch (and yes, I have been burnt by that silly 110934 patch issue, but rolling it out doesn't seem to solve the problem).

I have tried to install the following versions of CheckPoint, all with no sucess:
- NG with AI R54 (this is the primary one)
- NG with AI R55 + HFA 14
- NG with AI R55 + HFA 15
- A manually modified version of R55 that included HFA16.
I have tried installing both the enforcement module and the enforcement module + logging module and it hangs at the same spot.

The SVN foundation installs fine, but when the install script attempts to install VPN-1 & Firewall-1, it gets so far then hangs. Specifically, it installs everything and then it tries to register the new compents into the CheckPoint registry. After a couple of minutes, the CPRegSvr process will hit 100% on one of the CPUs and just stay there. It's a good thing the box has four processors or I'd never be able to get on remotely.

I've sending hangup signals (HUP) to the process, but that just kills it. The funny thing is the script seems to continue after that. The R55 installs finish installing, but R54 hangs on the fw1 process while trying to generate the default filters. However, once the install completes, everything seems like it might work, but when I run the cpinfo script, it tells me that there are NO CheckPoint componets registered, so I don't really trust it, and this box eventually has to go into production.

There appears to be nothing in the CheckPoint knowledgebase about the CPRegSvr process and who thought it was a good idea to duplicate the Windows registry on Solaris anyway? (Sorry, *NIX-biased rant.) Or more accurately, why isn't it working on my system? Has anyone else seen this or a similar problem?

Adam.