CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Windows
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-07-25
Junior Member
 
Join Date: 2007-07-24
Posts: 3
Rep Power: 0
scriber17 has an average reputation (10+)
Default All of a sudden, cannot logon to Policy editor

error message says,
cannot be initiated, make sure server "localhost" is up or running. Policy editor is installed on firewall itself. 127.0.0.1 is registered, and so is the ip of the firewall. I have tried rebooting firewall.
Reply With Quote
  #2 (permalink)  
Old 2007-07-25
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,670
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: All of a sudden, cannot logon to Policy editor.

Try fw unloadlocal and see if that fixes it. If so, then you have a rule that stopping access.
Reply With Quote
  #3 (permalink)  
Old 2007-07-26
Senior Member
 
Join Date: 2006-10-23
Posts: 168
Rep Power: 3
Danielpb has an average reputation (10+)
Default Re: All of a sudden, cannot logon to Policy editor.

Also make sure you have the checkpoint services running on the Mgmt.
Reply With Quote
  #4 (permalink)  
Old 2007-07-26
Junior Member
 
Join Date: 2007-07-24
Posts: 3
Rep Power: 0
scriber17 has an average reputation (10+)
Default Re: All of a sudden, cannot logon to Policy editor.

Would fw unloadlocal stop the firewall from working? It's in production, and working right now. Whats the command to undue that? fw loadlocal?
Is the command to start checkpoint services cpstart?

Thanks!
Reply With Quote
  #5 (permalink)  
Old 2007-07-26
Senior Member
 
Join Date: 2006-10-23
Posts: 168
Rep Power: 3
Danielpb has an average reputation (10+)
Default Re: All of a sudden, cannot logon to Policy editor.

Fw unloadlocal will remove the active policy applied to the module,
cpstop - will stop the checkpoint services cpstart - will start the checkpoint services, Note when the services restart on the Module it will also fetch the last installed policy from the mgmt.
Reply With Quote
  #6 (permalink)  
Old 2007-07-26
Junior Member
 
Join Date: 2007-07-24
Posts: 3
Rep Power: 0
scriber17 has an average reputation (10+)
Default Re: All of a sudden, cannot logon to Policy editor.

Sorry, I'm a newbe.
Tried stopping and starting services, still cannot login.
After I unload the policy, how do i reload it?
Reply With Quote
  #7 (permalink)  
Old 2007-07-26
Senior Member
 
Join Date: 2006-06-28
Posts: 140
Rep Power: 3
david has an average reputation (10+)
Default Re: All of a sudden, cannot logon to Policy editor.

Is the computer you are trying to access the Dashboard from defined as a GUI client?

can you telnet to port 18190 of the management server?
Reply With Quote
  #8 (permalink)  
Old 2007-07-27
Member
 
Join Date: 2006-02-21
Location: 127.0.0.1
Posts: 56
Rep Power: 3
runcmd has an average reputation (10+)
Default Re: All of a sudden, cannot logon to Policy editor.

Quote:
Originally Posted by chillyjim View Post
Try fw unloadlocal and see if that fixes it. If so, then you have a rule that stopping access.
Question: If you "unloadlocal" doesn't that revert back to a default policy which is wide open? Won't the firewall be a wide open pipe until a policy is fetched or pushed?
Reply With Quote
  #9 (permalink)  
Old 2007-08-02
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 909
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: All of a sudden, cannot logon to Policy editor.

No. It allows management server connections (if implied rules are enabled) but IP routing is turned off, so nothing will route between the interfaces. The only caveat is that the enforcement module no longer has rules to protect itself, so you had best be fully patched. If possible the Internet line should be disconnected.

There is no "default policy" like you mentioned.

Ray
Reply With Quote
  #10 (permalink)  
Old 2007-11-02
Junior Member
 
Join Date: 2007-11-01
Posts: 1
Rep Power: 0
siggy28 has an average reputation (10+)
Default Re: All of a sudden, cannot logon to Policy editor

Hi Guys,

I am encountering this problem currently. So did anyone manage to find a solution for it? I tried unloading the policy for localhost but also cannot log in to the policy editor.

I am currently running on Win 2K server SP3 with Checkpoint NG FP2. Any expert can advice?

Thanks.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 00:34.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0