CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 6 of 6

Thread: Checkpoint UTM-1 Version R70.20

  1. #1
    Join Date
    2012-11-20
    Posts
    42
    Rep Power
    0

    Default Checkpoint UTM-1 Version R70.20

    Hello All,

    When I want to push a policy to the clustered gateway, I keep receiving the error messages below:

    Installation Targets Version Policy Type Details
    Firewall-Cluster R70 Network Security Standard:
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 19732: ERROR: Duplicate keys <c3904f1f, 00000050> in table 'web_server_rules'
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/updates.def", line 2361: ERROR: table <web_server_rules> undefined
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/updates.def", line 2365: ERROR: syntax error
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/updates.def", line 2369: ERROR: syntax error
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/updates.def", line 2388: ERROR: table <web_server_rules> undefined
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/updates.def", line 2395: ERROR: table <web_server_rules> undefined
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/updates.def", line 2488: ERROR: table <web_server_rules> undefined
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/updates.def", line 2764: ERROR: table <web_server_rules> undefined
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/lib/base.def", line 508: ERROR: table <web_server_rules> undefined
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/lib/base.def", line 566: ERROR: unknown macro or function <spii_record_conn_match>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/lib/crypt.def", line 63: ERROR: unknown macro or function <RECORD_CONN_EX>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/lib/crypt.def", line 240: ERROR: unknown macro or function <RECORD_CONN_EX>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/lib/crypt.def", line 252: ERROR: unknown macro or function <RECORD_CONN_EX>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/lib/base.def", line 632: ERROR: unknown macro or function <USER_PASS_CONNECTION_SCV>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/lib/base.def", line 685: ERROR: unknown macro or function <USER_PASS_CONNECTION>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/lib/base.def", line 716: ERROR: unknown macro or function <RECORD_CONN_EX>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/lib/base.def", line 727: ERROR: unknown macro or function <SIMPLIFIED_RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/lib/proxy.def", line 43: ERROR: unknown macro or function <RECORD_CONN_EX>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: unknown macro or function <RECORD_CONN>
    Firewall-Cluster R70 Network Security "/opt/CPsuite-R70/fw1/conf/Standard.pf", line 29493: ERROR: syntax error
    Firewall-Cluster R70 Network Security Compilation failed.
    Firewall-Cluster R70 Network Security Operation ended with errors.


    I really don't have a clue what could cause this?

    Anyone has an idea?

    Thanks and regards
    Torenhof

  2. #2
    Join Date
    2009-04-14
    Location
    Ohio
    Posts
    405
    Rep Power
    11

    Default Re: Checkpoint UTM-1 Version R70.20

    It seems to be complaining about more than one object with IP address 195.144.79.31 being in the 'web servers' defined listed in Dashboard. Open up each object with that IP, click 'configure servers' and uncheck 'Web Server' on one of them. Once that is fixed, the other errors could go away.

  3. #3
    Join Date
    2012-11-20
    Posts
    42
    Rep Power
    0

    Default Re: Checkpoint UTM-1 Version R70.20

    Quote Originally Posted by bmolnar View Post
    It seems to be complaining about more than one object with IP address 195.144.79.31 being in the 'web servers' defined listed in Dashboard. Open up each object with that IP, click 'configure servers' and uncheck 'Web Server' on one of them. Once that is fixed, the other errors could go away.
    Well that did the trick, there were indeed two webserver objects being defined as 'web servers'.
    Thanks a lot for your answer.

  4. #4
    Join Date
    2012-11-20
    Posts
    42
    Rep Power
    0

    Default Re: Checkpoint UTM-1 Version R70.20

    Quote Originally Posted by bmolnar View Post
    It seems to be complaining about more than one object with IP address 195.144.79.31 being in the 'web servers' defined listed in Dashboard. Open up each object with that IP, click 'configure servers' and uncheck 'Web Server' on one of them. Once that is fixed, the other errors could go away.
    One more question, how did you find out the object had the IP you mentioned in your reply?

  5. #5
    Join Date
    2009-04-14
    Location
    Ohio
    Posts
    405
    Rep Power
    11

    Default Re: Checkpoint UTM-1 Version R70.20

    Quote Originally Posted by torenhof View Post
    One more question, how did you find out the object had the IP you mentioned in your reply?
    It was displayed in HEX in the first error message

  6. #6
    Join Date
    2012-11-20
    Posts
    42
    Rep Power
    0

    Default Re: Checkpoint UTM-1 Version R70.20

    Quote Originally Posted by bmolnar View Post
    It was displayed in HEX in the first error message
    Ok thats all cleared up now. Thanks again for the effort.

Similar Threads

  1. Upgrade UTM-1 270 from R70 to R75.20
    By peddy76 in forum Installing And Upgrading
    Replies: 0
    Last Post: 2012-09-09, 10:56
  2. E75.20 checkpoint mobile client compatibility with utm-1 edge
    By tuberider in forum SecureClient/SecuRemote
    Replies: 0
    Last Post: 2011-12-13, 15:24
  3. problem installing Nortel iphone 2050 Checkpoint R70.20
    By maoguve123 in forum Miscellaneous
    Replies: 2
    Last Post: 2010-12-16, 16:38
  4. Checkpoint R70.20 to Nortel Contivity
    By rmmagow in forum IPsec VPN Blade (Virtual Private Networks)
    Replies: 2
    Last Post: 2010-12-15, 11:30
  5. Surf Control and checkpoint R70.20
    By DoctorC4 in forum Interoperability
    Replies: 1
    Last Post: 2010-05-04, 12:43

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •