R65 HFA02 released

[lammbo]

Originally Posted by lammbo

Applied to Win2003 SP2 (HA) SCS servers without issue.

Turns out there was 1 issue. I lost the ability to install Database to the Eventia server. When SCS upgraded to R65, it installed Connectra, even though I did not have that installed previously. Once I uninstalled connectra from both SCS, I could Install Database to Eventia again to update it's objects tables.

I did have to run some strange pre-uninstall exe from the connectra directory before I could remove this component using Add/Remove programs. It prompted me with the exact path the first time I tried. I ran the exe and then went back to Add/Remove and it uninstalled without error. Rebooted SCS and all is well.

[hotice_]

Originally Posted by chuachongchee

I'm using the one downloaded from the usercenter? Have tried to use that to upgrade_export/import without any problems? Tried on RHEL3.0 and SPLAT..

Also tried to import using the upgrade_import from the system itself.. ok soo far to..

Your SCS running R65 HFA02?

upgrade_export won't work on two different implementations I have running this

R65 runs fine but as soon as I put HFA02 on it....

[chuachongchee]

Originally Posted by hotice_

Your SCS running R65 HFA02?

upgrade_export won't work on two different implementations I have running this

R65 runs fine but as soon as I put HFA02 on it....

Have you tried to download and use the upgarde_tools from usercenter??

[hotice_]

Originally Posted by chuachongchee

Have you tried to download and use the upgarde_tools from usercenter??

yeah

that didn't help me ...

[RayPesek]

Would you please paste in what is showing on the screen when you run it?

Thanks,

Ray

[mcnallym]

Does anyone here have any experience of putting the R65 HFA02 onto IP390 Flash systems at all.

Doesn't seem to want to go on and working with Nokia TAC already, just looking for other peoples experience if any.

In my experience it runs through says installed, the CPInstLog shows no errors but after rebooting then shows no HFA either in SMARTUpdate or with an fw ver -k.

Very similar to the IP265 about 18 months ago.

[chuachongchee]

Originally Posted by mcnallym

Does anyone here have any experience of putting the R65 HFA02 onto IP390 Flash systems at all.

Doesn't seem to want to go on and working with Nokia TAC already, just looking for other peoples experience if any.

In my experience it runs through says installed, the CPInstLog shows no errors but after rebooting then shows no HFA either in SMARTUpdate or with an fw ver -k.

Very similar to the IP265 about 18 months ago.

Any diff in version and/or the bulid number b4 and after the hfa02? I saw this on SPLAT though, when checking fw/fwm ver, it does'nt say "HFA02" only the bulid number changes...

[vijayant]

Hi Everyone

Just a quick check.. Is R65 with HFA02 stable till now on Splat. We are about to impliment the same for our new Facility in Jan

[erx@hot.ee]

Hi

Has anyone tried to install R65 HFA02 to IPv6 enabled SPLAT. My firewall was not able to boot after that. It says:
Starting system
............
CKP: Loading FW-1 IPv6: Failed

and line in /var/log/messages
CKP: failed to execute `/sbin/insmod -f /etc/fw.boot/modules/fw6mod_smp.2.4.21.cp.i686.o fw_kversion=2 fw_kpatchlevel=4 fw_ksublevel=21 fw_kextraversion=21 '

And I even reinstalled the R65 splat VPN-1 Power, enabled ipv6 and applied HFA02.
The result was the same.

Is there a solution to this problem?

All the best,
Erkki

[RayPesek]

Solution ID: sk34146 - Last Modified: 13-Mar-2008
IPv6 module fails after enabling IPv6 on VPN-1 Power/UTM NGX R65 HFA_02

* IPv6 module fails after enabling IPv6 on VPN-1 Power/UTM.
* The Security Gateway does not boot.
* Error is displayed: "CKP: Loading FW-1 IPv6 FAILED".

Check Point Support offers a Hotfix to resolve this issue. To open a service request, go to SecureTrak, or contact Worldwide Technical Assistance Centers at: Americas: 972-444-6600 or International: +972-3-6115100

Ray

[sail4fun]

Hfa_02 on splat 2.6 kernel causes some problem with Smartview Monitor , my enforementmodules shows as disconnected, but they are running , no problem.

Any idea if there is a tmp fix for this (so i can se my modules in smartview monitor again )

?

Rgds

Geir

[chuachongchee]

Hmm... i got some weird issues too.. but on other matters.. support recommended to use Smartconsole R65 HFA01... maybe you can try that too??

[RayPesek]

One of my two shows disconnected but only when I connect to it or push a policy to it. Otherwise it doesn't email me.

Ray

[sail4fun]

Originally Posted by chuachongchee

Hmm... i got some weird issues too.. but on other matters.. support recommended to use Smartconsole R65 HFA01... maybe you can try that too??

Nope the Smartdashboard hfa_01 doesnt fix this
seems like the rtm... module for the 2.6 kernel og Splat is missing in the hfa_02 ?!

[RaSta]

Got two big envirnoments.

One no problems all is fine
other one I can't push policies, and the tracker is not installed as it should be.
Anyone knows how to install the tracker only??

[chuachongchee]

Originally Posted by RaSta

Got two big envirnoments.

One no problems all is fine
other one I can't push policies, and the tracker is not installed as it should be.
Anyone knows how to install the tracker only??

Are you talking about the SmartDashboard suite or the gateway/management itself?

[msarzina@yahoo.it]

Guys the R&% HFA02 has been released last year , just the rekease notes have been updated :)

VPN-1 Power/UTM NGX R65 SecurePlatform R65_HFA_02
Product VPN-1 Power/UTM
Version NGX R65
Platform SecurePlatform
Release R65_HFA_02
Filename VPN-1_R65_HFA_02_wrapper.SecurePlatform.tgz
Size 136.14 MB
MD5 Checksum a86516770d877cad8fdcbe5d0b093aa6
Date Published 21-Oct-2007

[tjvreugdenhil]

Originally Posted by RayPesek

One of my two shows disconnected but only when I connect to it or push a policy to it. Otherwise it doesn't email me.

Ray

Did you every find out the problem... I have a base install of R65 and I am getting the same thing...

[RayPesek]

Yes, but indirectly. There were a couple of 10 M/bps half-duplex hubs between the SmartCenter and the firewall that was having the problem. As soon as the hubs got replaced by switches and everything went to 100 M/bps full duplex, the problem vanished. My guess is it's more of a timeout issue where it is very sensitive to path delays. It's been fine for over a month.

Ray