Can't connect to remote module

[gibster]

Hi Folks,
I'm fairly new to this, so please bear with me,
Our organisation has 2 sites, both using checkpoint firewalls (ngx r61). At the remote site the IP address range has changed, so using the console I changed the default gateway and now users here can browse the internet.

At the site where the management firewall is situated I changed the IP address of the remote site in the smart dashboard, however I cannot install the policy. In fact I cannot even ping the remote firewall from the site where the management station is. I can ping the remote firewall from outside the company network.

So what have I done wrong, and how can I get the firewalls talking to each other again.
Please help.
Charlie.

PS Mods, feel free to move this to a more appropriate section if this is in the wrong place.

[RayPesek]

At the remote site the IP address range has changed, so using the console I changed the default gateway and now users here can browse the internet.

Which IP address range changed? External or internal?

Can you still SSH to the firewall or otherwise gain console level access? If so, run the command

fw unloadlocal

and it will remove the security policy. It will allow management connections if you have the implied rules for management enabled. This will allow you to connect with the SmartCenter again so you can install a policy. Be aware that the firewall can no longer protect itself, however IP forwarding is disabled so there isn't any risk to your internal network. Still, you want to push a policy as fast as you can, particularly if you are not on a current operating system and patch level for the firewall.

HTH,

Ray.

[gibster]

Thanks for your help on this Ray,
Firstly to answer your questions, it's the external IP address that has changed, and yes I can gain console access to the firewall.

I'm still confused as to why I cannot connect to the remote firewall from the management station or why I cannot even ping the remote firewall from inside the network where management station is located, when I can ping the firewall from outside of the network. I guess it's some sort of routing issue.

I'm not certain I want to unload the security policy until i'm certain I can reload it from the management station.
thanks
Charlie.