Installing Policies on a IP265

[fabwhack]

Dear all,

Newbie to Checkpoint, so please be gentle with me.

We've bought an IP265 (flash-based), and it's pre-installed with NGX R61. I understand this unit only runs as an "enforcement" device, so I've got SmartCenter installed on a separate Windows 2003 server.

When I'm trying to install a simple test policy on the unit, I get the error:

"Installation failed. Reason: TCP connectivity failure (port = 18191) (IP=192.168.7.254) [error no. 10 ]. "

If I do a (out-of-band) "cpstop" on the unit, I can communicate with it, but of course I can't install policies as Checkpoint is disabled.

I reckon the firewall is blocking everything, including port 18191, which means I can't install policies telling it ... er, not to block port 18191. How can I get around this Catch 22?

[fabwhack]

Problem solved; I reinitialized the SIC and everything is fine now :)

[securefreak]

You can try from the command line type:
fw unloadlocal
this will make CP to unload the blocking policy and allow you to install a new policy.

Good luck!

[BSDsnob]

How did you reinstall the SIC that is what I am trying to do...