[Date Prev][Date Next][Thread Prev][Thread Next][Thread Index]

Re: [fw1-gurus] r55 upgrade



On Tue, 2004-12-21 at 13:38 -0800, Ed Dotorg wrote:
> Question...  Does running cpstop on the management
> server have any effect on the enforcement module or
> does it stop only the Checkpoint services that are
> running on the management server?
> 

This will do a few things. One thing it won't do is stop the firewall
from passing traffic. It may, however, affect VPNs if you're using
certificate authentication for either remote access or site-to-site VPNs
since the CA lives on the manager. It will also cause the firewall to
start logging locally until the manager is back up. This isn't usually a
problem unless the firewall is low on disk space.

Rob

---------------------------------------------------------------------
FireWall-1 Gurus Mailing List (http://www.phoneboy.com/gurus)
To unsubscribe, mailto:fw1-gurus-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, mailto:fw1-gurus-help@xxxxxxxxxxxxxxxxxx