Error Attempting to Edit VPN Community Properties

[pfatts]

I have been having this issue for some time, but I have always chosen to just live with it. Now it is again sticking a thorn in my side so I thought I ask if anyone else has run into this, and if so does any one know a fix.

Details:
Windows Server 2003 64 bit Edition
CP NGX R60 Management Server

Basically what happens is the VPN tab in the policy screen goes missing. You can still get to the VPN communities tab and go through the Manage menu to get to the VPN communities as well, but there is no policy page that shows the map of the communities. The continuing issue is that when I edit the My Intranet Community I can go to all the different sections with out issue except for VPN Properties if I click on that setting the page comes up grey, and does not show the settings, but instead causes the program to crash.

Currently, I am trying to install a new gateway in our network and while I can put the network in the VPN Community it does not inherit the right settings to establish a connection.

As I mentioned before I have run into this issue before, at that time the solution give to me was to reinstall checkpoint on the management server. If that is what I need to do again, so be it, but I wanted to get a different opinion first.

Thanks,

Miles

[northlandboy]

Just wondering, but is it because it thinks you've got a traditional mode policy?

You could see if you've got the option to convert it to a simplified mode policy, or try creating a new policy, in simplified mode.

[Robby Cauwerts]

Hi,

I've also seen the same problem once.
Upgrading to the latest HFA and using the latest SmartConsole version solved it.

Kr.
Robby

[pfatts]

Thanks for the replies. I will try the updates.

[pfatts]

I just wanted to give an update. I reinstalled Server 2003 64 Edition and then went on to install NGX R60 and HFA 4. I also was using Smart Console with HFA 2. The same issue occured. One additional note is that in the General Properties of my policy are now (probably were before) missing several sections pertaining to VPN connections. Doing more work I tried setting up a splat box to work at my Smart Center Server, but in the end after a couple of policy installs I was again faced with this same issue. Does anyone have an idea of what may be the cause? I will continue my work on this, but I really think I am just redoing the work without the solution.

[RayPesek]

Are you sure x64 versions of Windows are supported? I can't find that in the release notes.

Ray

[pfatts]

While I'm not sure that x64 systems are supported, I did test the SPLAT config on a x32 system. That is why this issue is so perplexing. It seems to affect any Smart Center Server that I configure, and I have tried almost every config I can think of. Also, on either system, when I attempt to create a new policy the policy that is created also lack the VPN properties mentioned in my previous posts. My only thought is that maybe one of the systems I'm using dashboard on to config the policy with has some issue that may be at the root of the issue. Does that sound feasible?

[kva.kva]

I know only two facts about x64 support.
SPLAT supports some x64 servers (Sun Fire X2100, X4100 and X4200) and SecureClient doesn't work on Windows XP Pro X64. And I don't find any information about support Windows x64 on CP site or from docs. So now support x64 is a big question.

May be it's strange question but... if you run your client in demo mode do you see missing sections?
May be your SmartCenter has some errors or warnings when it starts in Event Viewer?

[pfatts]

Opening the client in demo mode does show all the missing VPN sections. Also, at your suggestion I checked the event viewer. When I open dashboard, I get the following information event. One note, this event has shown up everytime I open dashboard. Even when the VPN Properties were correctly working for the short time after install.


Event Type: Information
Event Source: FireWall-1
Event Category: None
Event ID: 2
Date: 10/29/2006
Time: 7:56:37 AM
User: N/A
Computer: CHPTMGMTSVR
Description:
The description for Event ID ( 2 ) in Source ( FireWall-1 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Logging in >>>>.

I also found the following application error generates when I crash dashboard by clicking on the VPN properties section in My Intranet's properties.

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 10/29/2006
Time: 7:57:08 AM
User: N/A
Computer: CHPTMGMTSVR
Description:
Faulting application FwPolicy.exe, version 10530.0.0.0, faulting module DataStruct.dll, version 59.1.6030.1, fault address 0x00005f11.

[kva.kva]

It looks like problem with CP installation, may be because using x64 in this case.
Another small hope. Did you install CP from original CD? Once I had problem with installation from cd which was created from iso (bad iso file).

And last, I think - ask CP about supporting Windows x64.

[pfatts]

I'm really not worried about the 64 bit support. As I stated in my previous posts. This issue also occured under 32 bit SPLAT environment. I would be happy running this on any machine that will work, but as of yet everying I have tried has failed in exactly the same way. I would like to find out what is going wrong, as it is happening on more than one platform.

[pfatts]

To answer your question about the CD used for the installation, I am using CDs supplied from Check Point P/Ns: 701500 and 701501 SecurePlatform Build: 244

[kva.kva]

Hm
I found old SK - https://secureknowledge.checkpoint.c....do?id=sk23449 (express and missing VPN tab).
Did you try to run SmartDashboard on system without HFA?
All look like installation problem, imho. Is HFA's checksum correctly?

And may be problem with cp.macro - https://secureknowledge.checkpoint.c....do?id=sk31262 (about HFA01, but may be helpful).

[pfatts]

I am requesting new meda from checkpoint we will see if that helps clear up some of my issues. Thanks for your help, and I will post an update when I get the new CDs in.

Update:

The new media has seemed to take care of this issue as well as SPLAT now has drivers for ICH7 SATA controllers which I happened to have in a box I was hoping to make a firewall. Yippee!

[gorhon]

i have some problem with release 55. How solve this problem? How Sata?