NG running on ngx p1 and adign ngx fw to the P!

[wthile]

Hello, I am trying to bring on a new firewall.. its an IP 530 it will eventually replace on of the ip 330's I have.. howerer I cn not get teh policy to compile and install... Any ideas

P1 is on solaris an our fw's are ae nokia... shy help would be greatly appriciated

Thanks

William

[wthile]

Afer reading what I wrote I realize I didnt give very much information....

I have an ip 330 running NG R55 and I am replacing the IP330 with an IP530

IP330 running ipso 3.8 and NGR55 connecting to Provider 1 NGX running on SPLAT

New installation is IP530 IPSO 4.0 running NGX R60..

Problem is on NG the policy compiles perfectly and installs just fine...

change out the firewalls reset SIC go into the firewall obj get OS and Get Firewall version information, it reads the proper iformation from teh firewall
I did a rules verification and came back good... and I attempt to push the policy it goes throgh verification and fails to compile giving a work buffer overflow, typically based upon sr_enc_domain, however we have no gateways setup for Sr and there is no encryption domain. This isnt the only location it errors about but rather the most common one... feels like chasing a ghost... I correct what I think is the issue by deleting a host or network only to haev the work buffer overflow to occure at a different location...

I have gone so far as to setup a "test" P1 and stripped out everything that I possibly could and im still getting the same error... work buffer over flow... It just seems to change location.

Odd thing is I have created another CMA by hand and new F/W object as NGX and it will compile using the same global objects just fine...


Thanks in advance..

William

[wthile]

I guess no one has run into this issue..... I have been workign on this for some time now... and even with Checkpoitn and Nokia involved.... I will post the resolution if we ever find one.