Urgent! HFA Install

[1q2w3e]

I need to insall the lastest patch this week and i do need your great assistance.

I have tried looking for how to install the patchHFA onto the SmartCenter Server but have not found a precise document. The following documents i have found but which one will do the job?

http://www.checkpoint.com/support/d...fp3/HFA_327.pdf

or

http://updates.checkpoint.com/files...a_r55_17-rn.pdf

or

http://updates.checkpoint.com/files...a_r55_17-rn.pdf.

or

https://downloads.checkpoint.com/dc...on=1070&os=1009

(fw1_HFA_R55_17.linux22.tgz)

This is the environment I have

SmartCenter On Windows
Enforcement module on SecurePlatform

Wich of the below should I be downloading for the above and for which.

FP3_HFA_327 for SecurePlatform (SHF_HFA_327.linux.tgz)
FP3_HFA_327 for Windows (SHF_HFA_327.win32.zip)

Thanks

[stuartgreen]

umm, think you've answered your own question there...

If you're running FP3 and upgrading to FP3 HFA327 i'd say the docs that relate to R55 are no good :P

You'll need both of those patches, apply the management first and then the enforcement point.

FP3_HFA_327 for SecurePlatform (SHF_HFA_327.linux.tgz)
FP3_HFA_327 for Windows (SHF_HFA_327.win32.zip)

^^ (surely you can guess which goes where from the names ;) ) ^^

[Lackie]

And as for how to install them... you have to untar/gzip the files. 'tar -zxvf filename' in linux and you can just use winzip or winrar in Windows. I would do this in it's own directory. Once this is done there will either be an install_hfa file or you will see two different files, one with cpshared in it's name and one with firewall. If you have the install_hfa file, great, just run that file. If you don't have this file. Run the cpshared file first and once it's done, run the firewall file. BOTH of these files have to be run to fully install the hotfix. The install_hfa script will do this if it's there.

As mentioned before, hotfix the management station first then the firewalls.

[1q2w3e]

Thanks

From the documentation i see SVN foundation HFA_327 must be installed first before the VPN1/FW1 HFA_327.

Where is the SVN foundation HFA_327 ?

Also it talks about the INSPECT file changes and to manually edit this. How do I go about doing this?

Also which directory on the Windows or SecurePlatform do I FTP the HFA_327 to.

Thanks

[Lackie]

Originally Posted by 1q2w3e

Thanks

From the documentation i see SVN foundation HFA_327 must be installed first before the VPN1/FW1 HFA_327.

Where is the SVN foundation HFA_327 ?

Also it talks about the INSPECT file changes and to manually edit this. How do I go about doing this?

Also which directory on the Windows or SecurePlatform do I FTP the HFA_327 to.

Thanks

Both files will be in the HFA_327, the SVN and the VPN-1/FW1. You have to unzip the file to see them.

If you need to make any INSPECT changes for specific fixes, these changes will be in the release notes and how to perform them will be there as well.

You can put the HFA file in any directory that you want as you can delete it after you install it.