| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| It's a huge download and it fixes many critical issues regarding licenses, passwords, Edges, Management-HA etc. Install on R65 Enforcement Modules and especially on your SCS asap. Release Notes Best regards, Danny Trommer CCSA/CCSE/CCSE+ |
| |||
| you're right but I never saw that CP released a further fix in such a small time frame __________________ misery is optional |
| |||
| Applied to Win2003 SP2 (HA) SCS servers without issue. Applied to Eventia Suite server running on SPLAT. This server is running Analyzer, Reporter and is my primary log server (so it also runs fw-1 for log collection). Not only were there no issues on Eventia, but it fixed all 8 of those bugs I reported to CP. The largest fix here is the log consolidation is solid now (so far). The second largest fix is the RuleBase analysis report is actually correct! I have a new site going live this weekend and will be applying this to that active/passive cluster later today. Unless I post again, assume all went equally as well with these. __________________ There's no place like 127.0.0.1 |
| |||
| I think the biggest reason was that they included fixes for the recently reported vulnerabilities if you were logged on to SPLAT as an admin. My guess is they wanted to get that fix out and clean up a few issues that they already had fixes for. I think there were only six issues noted in the release notes. Ray |
| |||
| Quote:
Installation Targets Version Policy Type Details device_name N/A Advanced Security Info: VPN-1 Embedded Connector 7.0.1.2 starting device_name N/A Advanced Security Info: VPN-1 Embedded Connector generating topology for device_name device_name N/A Advanced Security Info: VPN-1 Embedded Connector packing topology for device_name device_name N/A Advanced Security Info: VPN-1 Embedded Connector packing ConfigSet for device_name device_name N/A Advanced Security Info: VPN-1 Embedded Connector generating via rules for Policy device_name N/A Advanced Security Info: VPN-1 Embedded Connector generating policy for device_name device_name N/A Advanced Security Info: VPN-1 Embedded Connector reducing policy for device_name device_name N/A Advanced Security Info: VPN-1 Embedded Connector compiling policy for device_name device_name N/A Advanced Security cpp: line 2, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifndef __fwui_head__ device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 20, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef FWGCC device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 22, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #else device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 24, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef FWCPP device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 26, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 28, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef __freebsd device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 30, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 32, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef __solaris2_i386 device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 34, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 36, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef __solaris2 device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 38, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 40, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef __hpux device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 42, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 44, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef __sunos4 device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security cpp: line 46, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 48, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef __rs6000 device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 50, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 52, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef __unixware device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security cpp: line 54, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 56, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef __WIN32 device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 58, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 59, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 92, Error: #include syntax error device_name N/A Advanced Security #include "sofaware.h" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 96, Error: #include syntax error device_name N/A Advanced Security #include "tcpip.def" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 97, Error: #include syntax error device_name N/A Advanced Security #include "fwconn.h" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 98, Error: #include syntax error device_name N/A Advanced Security #include "traps.h" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 99, Error: #include syntax error device_name N/A Advanced Security #include "kerntabs.h" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 100, Error: #include syntax error device_name N/A Advanced Security #include "table.def" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 101, Error: #include syntax error device_name N/A Advanced Security #include "../conf/xlate.conf" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 102, Error: #include syntax error device_name N/A Advanced Security #include "formats.def" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 103, Error: #include syntax error device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 108, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef LOG_ESTABLISHED_TCP device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 110, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #else device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 112, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 114, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef LOG_IMPLIED_RULES device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 116, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #else device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 118, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 128, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifndef NO_LOG_FEATURES device_name N/A Advanced Security #include "traps.def" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 129, Error: illegal character (13 decimal) in #if device_name N/A Advanced Security #if LOG_TIMEOUT > 0 device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 133, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifndef NO_RPC_FEATURES device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 138, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif __________________ misery is optional |
| |||
| Part2: device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 145, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifndef NO_RPC_FEATURES device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 156, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #else device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 166, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 167, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #else device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6735: device_name N/A Advanced Security #include "fwui_head.def" device_name N/A Advanced Security cpp: line 1, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifndef __user_def__ device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6863: device_name N/A Advanced Security #include "user.def" device_name N/A Advanced Security cpp: line 71, Error: #include syntax error device_name N/A Advanced Security #include "sw_nat.def" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6863: device_name N/A Advanced Security #include "user.def" device_name N/A Advanced Security cpp: line 78, Error: #include syntax error device_name N/A Advanced Security #include "sw_sd.def" device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6863: device_name N/A Advanced Security #include "user.def" device_name N/A Advanced Security cpp: line 223, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6863: device_name N/A Advanced Security #include "user.def" device_name N/A Advanced Security cpp: line 1, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifndef __init_def__ device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6864: device_name N/A Advanced Security #include "init.def" device_name N/A Advanced Security cpp: line 64, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifdef TCP_FASTMODE_ACTIVE device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6864: device_name N/A Advanced Security #include "init.def" device_name N/A Advanced Security cpp: line 66, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6864: device_name N/A Advanced Security #include "init.def" device_name N/A Advanced Security cpp: line 88, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #ifndef FTP_CONTROL_TIMEOUT device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6864: device_name N/A Advanced Security #include "init.def" device_name N/A Advanced Security cpp: line 90, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6864: device_name N/A Advanced Security #include "init.def" device_name N/A Advanced Security cpp: line 114, Warning: Unexpected text in #control line ignored device_name N/A Advanced Security #endif device_name N/A Advanced Security from file /opt/CPEdgecmp-R65/tmp/device_name.pf, line 6880: device_name N/A Advanced Security #include "code.def" device_name N/A Advanced Security 17 errors in preprocessor device_name N/A Advanced Security Info: Install policy for /opt/CPEdgecmp-R65/conf/Policy_name.W has failed. rc = 1 device_name N/A Advanced Security Info: VPN-1 Embedded Connector is done. rc = 1 device_name N/A Advanced Security Compilation failed. device_name N/A Advanced Security Operation ended with errors. __________________ misery is optional |
| |||
| Looks to me like they've stuffed up a Dos2Unix conversion on one/all of the embedded files. I'd log a CP support call, or at least check this. I've been getting increasingly disillusioned with the SmartCenter/Edge management. It was never good in the first place, but it seems to be getting flakier and flakier... In almost every case, I've had to throw out hopes of centrally managing the boxes because the SC doesn't allow flexibility of management anywhere near what is required (i.e. VPN communities forced to use certs instead of PSKs, no support at all for the very useful dynamic objects that the Edge box creates in its own policy, no way of managing ANY of the new 7.0 firmware features or wireless tech). And with SMP 7.0 *still* not released (despite the fact that CP is using it internally...), I wonder what CP's plans are for managing these boxes in the future. |
| |||
| >> VPN-1 Embedded Connector 7.0.1.2 starting What firmware are the Edge's on? I saw in the release notes that it uses a new version of the 7.5 libsw files. You might want to clean out that directory and downgrade the libsw files and see what happens. Personally I have no issues with requiring certs for managed Edge VPN's. They are far more secure than pre-shared keys and allow the use of DHCP Internet connections on the Edge's. The lack of Edge dynamic objects is one I completely agree with. Ray |
| |||
| I had this problem as well. HFA_02 overwrites the libsw folder and puts libsw version 7.5.29x into it. I replaced that with libsw version 7.5.33x from the official download site and it worked like a charm again. @Thorpuse: Check the new R67 beta (the one with the new kernel), it already contains the features you are requesting. It's also introducing the Edge Cluster object. Check Point knows that Edges are widely used, even in pro environments. It's wasn't clear to them in the first place that Edges would be so widely used and accepted as they are now. |
| |||
| thanks for feedback gentlemen! After the issue appeared the first time I downgraded to 7.0.48 with the same result. Boxes running on 7.0.45...can't find the 7.5.33 libsw for download? Gone in the meantime or did I not look properly? :) __________________ misery is optional |
| |||
| your screen looks great but I don't have the mail about 7.5.33 from CP/Sofaware anymore to login and get the EA stuff __________________ misery is optional Last edited by Porter; 2007-10-29 at 03:27. |
![]() |
| Thread Tools | |
| Display Modes | |
| |