NGX R65 Packages

[avilT]

I have my production envoronment, NG FP3 on Nokia IP330 with smart center server on Windows 2000. Under NG FP3 I have the following packaged turned on.Check Point VPN-1/FireWall-1 NG Feature Pack 3 and Check Point SVN Foundation NG Feature Pack 3. IP330 is reaching EOL soon.

I received my new nokia 390 appliance with 9 applications whic I am testing in a lab environment.
What are the respective packages for NGXR65? What is CheckPoint CPinfo and IPSO UTM Base? I have upgraded my smartcenter server to NGXR65. What applications should I enable on Nokia module and how should I proceed for communicating between Smartcenter server and the new module?
When I entered cpconfig on the module it gave me only the following options and no SIC option.
I only have the following:

1) Licenses
2) Administrator
3) GUI Clients
4) SNMP Extension
5) PKCS#11 Token
6) Random Pool
7) Certificate Authority
8) Certificate's Fingerprint
9) Disable Advanced Routing
10) Automatic start of Checkpoint Products
11) Exit

What is wrong with my setup?

[Danielpb]

I would say looking at the information you added below the device has been pre-configured as Standalone system for gateway and SmartCenter.

Remove and re-run the checkpoint packages….

[mcnallym]

The UTM base is a package that you need to install on the Nokia if going to use the UTM functionallity. cpinfo is the check point tool for grabbing check point configuration from the box.

Check point support partners can then see the Check Point configuration you are running without having to gain access to your system.

As Dan has said you need to uninstall the Check Point from the Nokia, remember to delete the /opt/deleted directory as well.

[cciesec2006]

The best advise I can give is to rebuild the Nokia IP390 from scratch via
bootmanager. That way, you will have a "clean" enforcement module.

[avilT]

Thank You very much for the reply.
The current IPSO image in the appliance is IPSO-4.2-UTM_BASE_BUILD004.tgz
Can I use the same image? I am not using any of the UTM features.

[RayPesek]

The BASE package seems to be recommended all the time. There are some notes in Nokia's KB about weird things happening if you don't have it.

Ray

[navsangha]

Does anyone know where i can download the UTM base build from, nokia website doesnt seemt ot let me download anything due to us not having a current support contract.

Is it on a ftp server somewhere.

PS I have a copy of the utm base build.tgz but i think its corrupted as when i type in newpkg and try to ftp it from my ftp server, windows xp box, to my ip350 gateway it says error: invalid compressed size for IPSO-4[1].2-UTM_BASE_BUILD004.tgz

Thanks

[chillyjim]

Originally Posted by navsangha

Does anyone know where i can download the UTM base build from, nokia website doesnt seemt ot let me download anything due to us not having a current support contract

If your support is not current, you are not entitled to the new code. Please renew your contracts with Check Point and Nokia before acquiring/installing new code. Anything else is illegal, and we don't want anything like that going on here.