NGX Problem

[mpegan]

Hi All,

I very new to checkpoint and I have installed NGX R60 on a Nokia Ip330. The install went fine and I can access the device via SmartDashboard, but I can't get into the "Topology" properties.

Once I click on Topology it gives me a message "name already in use". I've installed the 15 day eval in standalone mode.

I've reinstalled from sratch with the same problem. Seems I can't add interfaces or configure anti-spoofing.

Any ideas?

[ddarby1]

I'm not an expert either, but have done a succesful install on an IP330.

Normally I'd expect to use a distribued install, with the IP330 as the Enforcement Module and something like a Windows Server as the SmartCenter Server.

What is the name of the Nokia device in SmartDashboard? Is SIC communication definitely working (Double-Click on the device, then on 'Communication')

Can you provide any more details?

[Westy]

Is it possible you already have an object with the name your trying to apply?

[mpegan]

Thanks for helping out. Under Network objects, CheckPoint I have my firewall names "FW1". If I double-click it, it opens the general properties. The communications button is greyed out.

Under the general properties, if I try and click on topology, NAT, VPN or any of the others I get that message, "name already in use".

[mpegan]

Call Checkpoint and they were nice enough to help out. All I need to do was rename the firewall object.

Question though. Is there anyway to speed up the verification and installation of policies? It seems it should be much quicker when installing simple policies.

Thanks in advance.

[Westy]

How long is it taking you to verify and install the policy?

How many rules do you have in your rulebase?

We run on a Compaq DL320, 512 mb of ram, about 40 rules in the rulebase. Takes about 5 to 10 seconds to verify and install the policy after making a change.

[chillyjim]

I think 30 secs or so is about the minimum you'll ever get. If it's taking longer than 3-4 mins I'd be concerned.