View Single Post
  #1 (permalink)  
Old 2005-10-24
Youngy Youngy is offline
Member
 
Join Date: 2005-09-21
Posts: 83
Rep Power: 4
Youngy has an average reputation (10+)
Default Resetting SIC after upgrade\migration of mng server

Hi all,

Does anyone know if this is the correct procedure to follow after you put an new management server in place in relation to resetting the SIC connections to the managed devices (enforcement modules).

1. Stop all Check Point processes on the Management Station (cpstop).

2. Remove the SIC entries from the Registry under `SOFTWARE/CheckPoint/SIC

3. Delete the InternalCA.* and ICA.* files from the $FWDIR/conf directory.

4. Open $FWDIR/conf/objects_5_0.C:
Remove the Primary Management Object's "sic_name" attribute.
Remove the InternalCA object.

5. Run cpconfig and initialize the CA.

6. Restart the Check Point processes (cpstart).

WARNING: THIS OPERATION WILL CAUSE YOUR FIREWALL-1 NG ENVIRONMENT TO FAIL.
CONSIDER THE IMPLICATIONS VERY CAREFULLY BEFORE USING IT.


Thanks
Reply With Quote