Cant Make Changes in policy Editor

[starwars]

Please Help i have installed a new policy on checkpoint and when i go back i can only view it. I am using the same username etc but cannot make changes to it now.

 

[Piloria]

Check two things.

1. On the login screen where you enter username and password make sure that "Read only" isnt checked

2. run cpconfig on the firewall and makesure that for some reason you havent managed to change your rights to read only.

 

[starwars]

Thanks
I have already tried both those but are fine. I even created another user with all rights and still cant change policy.

The only advice given by ceckpoint was to reinstall on another box - but dont really want to do that.
regards

Claire

 

[Piloria]

Cant think of anything at the moment except swearing at it.
What OS / FW-1 version and SP level are you using?

 

[starwars]

This is even stranger now. I opened the policy and it says read only on the task bar even though i definitely have not checked it to be read only. I am wondering if you can save it as read only and thats why it wont let you do anything else. I have also tried locating the policy through explorer and checked the file wasnt read only. Is there any way of importing an old policy?.

thanks

Claire

 

[Piloria]

Is this problem with a remote GUI or using the GUI on the firewall itself?
i dont know what your configuration is but regardless of licences you can set up multiple guis's
options.
1. if you use a remote gui try using the local gui

2. try installing the gui to another machine (setting up required rules) and see if the problem goes away on the new gui. it will be using the same objects and rulebase.

if it fixes the problem then uninstall the gui and reinstall it on the original machine.

if you need more info or if this doesnt work just post back.

 

[Guest_imported]

Make sure you don't have more than one instance open. The firewall will only allow ONE administrator to be logged in W/ read/write priveledges at a time. Close any open sessions and log in again. As far as importing a new policy you would use the 'fw load' command in the bin directory. followed by the policy name and the resolvable hostname of the module.