CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Miscellaneous
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-08-17
Junior Member
 
Join Date: 2007-08-14
Posts: 14
Rep Power: 0
james.mathieson has an average reputation (10+)
Default objects_5_0.C

Hi all,

I have just set-up a VPN on checkpoint (NGX R60) to a PIX. In order to get this working I changed a setting in the objects_5_0.C file.

ike_use_largest_possible_subnets (changed from true to false)

Every so often when I push a policy, this setting changes back to true, and screws up my VPN one-way.

Is there a way to stop this happening? A patch/update, or is there something I'm doing wrong?

Kind regards

James
Reply With Quote
  #2 (permalink)  
Old 2007-08-17
Member
 
Join Date: 2007-05-31
Posts: 52
Rep Power: 2
manrag has an average reputation (10+)
Default Re: objects_5_0.C

How are you changing that value?

Are you using GUIdbeit?
Reply With Quote
  #3 (permalink)  
Old 2007-08-17
Junior Member
 
Join Date: 2007-08-14
Posts: 14
Rep Power: 0
james.mathieson has an average reputation (10+)
Default Re: objects_5_0.C

I'm doing it manually by editing the text file.
Reply With Quote
  #4 (permalink)  
Old 2007-08-17
Member
 
Join Date: 2007-05-31
Posts: 52
Rep Power: 2
manrag has an average reputation (10+)
Default Re: objects_5_0.C

Take a look at this resolution #skI3301 in wich it is explained how to use dbedit or Guidbedit to make changes to the objects_5_0.C file. I recommend using GUIdbedit, you can find the application in your installation path (this is were Smart Console is installed) ex:

C:\Program Files\CheckPoint\SmartConsole\R60\PROGRAM\GuiDBedi t.exe

You can use this utility to connect to Smart center server and change that value. You have also the choice to use dbedit. Try one of this ways and see if it works. Here is the solution in case you dont have access to it.

#skI3301.txt
Reply With Quote
  #5 (permalink)  
Old 2007-08-17
Junior Member
 
Join Date: 2007-08-14
Posts: 14
Rep Power: 0
james.mathieson has an average reputation (10+)
Default Re: objects_5_0.C

Many thanks for your advice, I'll give it a try.

Kind regards

James
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 21:03.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0