CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Installing And Upgrading
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-01-16
Junior Member
 
Join Date: 2006-06-28
Posts: 28
Rep Power: 0
thebuffman has an average reputation (10+)
Default .DEF files upgd importance

I have not been in the habit of updating the .def files whenever I perform a HFA update. Does anyone know the importance of updating these files? I have never had a problem because they were not updated from the latest HFA.

Any insight is appreciated.
Reply With Quote
  #2 (permalink)  
Old 2007-01-17
Senior Member
 
Join Date: 2006-07-28
Location: New Zealand
Posts: 853
Rep Power: 3
northlandboy has an average reputation (10+)
Default Re: .DEF files upgd importance

It depends.

*.def file changes are required for some specific fixes - e.g. there have been quite a few RTSP fixes that require changes. If you don't need the fix, then it doesn't really matter if you upgrade them or not.

If you've got any custom changes - e.g. for FTP - then you need to make the changes in the new files if you are upgrading them. That's the reason they don't do it automatically.

Be aware that if you do a major version upgrade, any custom changes are not carried forward. Can catch you out.
Reply With Quote
  #3 (permalink)  
Old 2007-01-19
Junior Member
 
Join Date: 2006-06-28
Posts: 28
Rep Power: 0
thebuffman has an average reputation (10+)
Default Re: .DEF files upgd importance

thanks northlandboy. 2nd question. in the documentation for applying hfa_04 there is a section on .def file upgrades. the first couple of sentences reference smartcenter .def file upgrades. they never mention .def file upgrades for enforcement modules. do enforcement modules not require .def file upgrades even though i see the new .def files present after installing hfa_04 on the enforcement module?
Reply With Quote
  #4 (permalink)  
Old 2007-01-19
Senior Member
 
Join Date: 2006-07-28
Location: New Zealand
Posts: 853
Rep Power: 3
northlandboy has an average reputation (10+)
Default Re: .DEF files upgd importance

.def file upgrades are only done on the mgmt station. They're used in compiling policy, not in enforcing it - well, not directly, anyway.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 12:39.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0