| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| error message says, cannot be initiated, make sure server "localhost" is up or running. Policy editor is installed on firewall itself. 127.0.0.1 is registered, and so is the ip of the firewall. I have tried rebooting firewall. |
| |||
| Would fw unloadlocal stop the firewall from working? It's in production, and working right now. Whats the command to undue that? fw loadlocal? Is the command to start checkpoint services cpstart? Thanks! |
| |||
| Fw unloadlocal will remove the active policy applied to the module, cpstop - will stop the checkpoint services cpstart - will start the checkpoint services, Note when the services restart on the Module it will also fetch the last installed policy from the mgmt. |
| |||
| Question: If you "unloadlocal" doesn't that revert back to a default policy which is wide open? Won't the firewall be a wide open pipe until a policy is fetched or pushed? |
| |||
| No. It allows management server connections (if implied rules are enabled) but IP routing is turned off, so nothing will route between the interfaces. The only caveat is that the enforcement module no longer has rules to protect itself, so you had best be fully patched. If possible the Internet line should be disconnected. There is no "default policy" like you mentioned. Ray |
| |||
| Hi Guys, I am encountering this problem currently. So did anyone manage to find a solution for it? I tried unloading the policy for localhost but also cannot log in to the policy editor. I am currently running on Win 2K server SP3 with Checkpoint NG FP2. Any expert can advice? Thanks. |
![]() |
| Thread Tools | |
| Display Modes | |
| |