FW1 NG AI Solaris help required

[PeteC]

Dear all,

Having trawled through both web and forum information it appears that numeropus Solaris (9) patches appear to break either the intallation or the operation of either the FW-1 functionality or the OS itself.

Most recently, I have installed a full Enterprise licensed FW1 NG (R55) with AI on a V240 virgin (un-patched) Solaris 9 based system (as a suggested Checkpoint platform). Installation went well BUT living behind an unpatched firewall is not something most admin staff would be happy with.

To date I have tried step wise patch addition and patch cluster updates. The results have ranged from annoying to requiring a complete system re-install.

Is anyone aware of a Checkpoint supported list of Solaris (9) patches ? Any help would be much appreciated.

Many thanks

Pete

[czech12]

I don't believe there is a list, that would be too easy! =)

If you search Check Point's SecureKnowledge, you will see the various patches that give Solaris 9 problems...

[PeteC]

Yup, unfortunately far too easy <sigh> !

Given we've got the Enterprise licensing for this product to run on a product base recommended by Checkpoint I find it bizarre that Checkpoint don't apparently provide assistance for the patches which it's software seemingly breaks.

Any chance a list could be compiled from comunittee knowledge ? Go on, who fancies a go ?!

Pete

[maurox]

Pete,
I had the same problems one month ago and i know that there are a lot of problems with the new recommended patch for Solaris.

For me the only solution , for the moment, is remove the patch and after do one of the following :
-install only the necessary patch for the CP installation
-try with an old ( no the last but not too old) Recommended patch
Maurox

[mmoret]

I have found that uninstalling patch 113713 solves most problems on Solaris 9 and Checkpoint NG.

You can safeley re-install this patch after installing.
This patch breaks the initial installation of NG R55, not the installation of any HFA.

Regards
Martijn