Nokia IP350 NG AI SIC & OTP

[fatboy69]

I have recently installed IPSO 3.7 and NG AI and Clustered 2 Nokia IP350's. It is a Dsitributed environment with my Nokias being my enforcment modules and a windows 2000 server running my smart Center.

When I run cpconfig on the firewalls I am not prompted to enter the OTP (One time Password) which I know you can do with previous versions of CP. This means I cant setup the SIC between the MGMT Module and my Enforcment Modules (Nokias).

Has any body come across this? Has this changed in NG AI? and does anybody know how to return the checkpoint configuration on a nokia platform back to defaults? I'm not to farmiliar with the command line. (First real time playing with the Nokias.)

Any help would be great in my time of need.

FB.

 

[GoneGaryT]

Hold the bus!

We run IP350 Nokias in a cluster, but important to note - they're oddities (along with the IP380). You cannot run IPSO versions greater than 3.5.x, certainly not 3.6 and I'd be very surprised if you can run 3.7; I'll have to check back on the Nokia site for that last one.

We're resigned to running nothing higher than CP FW-1 NG FP3 and IPSO 3.5.51 (AFAIR).

 

[fatboy69]

NG AI and 3.7 work a 100% I have found the answer to my problem.

I had to stop the friewalls, turn off the appplication then remove it. I then reinstalled NG and re ran cpconfig. Selected option (2) - Enterprise and then selected enforcement module.

Regards,

FB