RE: [FW1] First WinNT Firewall-1 Install - Advice?

["Really Boring" <rb1005@hotmail.com>]

See comments below:

>From: "Dennis Pasadis" <dennis@innovativesolutions.com>
>To: "Blazing Wolf" <blazing_wolf@yahoo.com>,        "FW1 List" 
><fw-1-mailinglist@lists.us.checkpoint.com>
>Subject: RE: [FW1] First WinNT Firewall-1 Install - Advice?
>Date: Thu, 16 Mar 2000 13:59:00 -0800
>
>
>BW:
>
>Checkpoint recommends NT SP#5 with FW-1 SP#5 if you are running
>version 4.0.  That was as of two weeks ago.  I just did it and
>it works great.

I agree - use FW-1 SP5 and NT 4.0 SP5.

  One tip - make sure you install the FW software
>in the default directory.  I didn't the first time and had to
>re-install to be able to install the service packs.  Why do they
>ask us where to put FW-1 if the SP's won't work?

I have not had this problem. I prefer to install FW-1 on a second drive 
(physical or virtual). Haven't seen any problem with installing the service 
packs.

>
>I've thoroughly research the FAT vs NTFS issue.  Microsoft
>and HP support engineers all recommended making the c: drive
>FAT and d: and other drives NTFS.  Why?  Because it is much
>easier to repair a damaged partition if it is DOS.  You can
>boot from floppy and check it and copy files.  But all files
>users access should be in NTFS partitions.

I haven't done the thorough research on FAT vs. NTFS, so I guess I'll stay 
quiet other than to mention that you lose all the benefit of being able to 
set access control lists on files and directories if you use FAT (which 
Dennis obviously realizes as shown by his next comment).

>
>My tendency is to modify that recommendation on a firewall and
>put NT and the FW on c: and make it NTFS.  After all, a firewall
>is supposed to be secure, so why not do it that way.  There are
>tools available that allow you to read and write NTFS partitions
>from boot floppies.
>

I have had CheckPoint trainers recommend _not_ putting FW-1 on the same 
drive as the OS. What do you do if you accidentally let your FW-1 logs fill 
up drive C:? This could make your system unbootable, blah, blah, blah. I 
like to put the OS on drive C: (NTFS), and put FW-1 on drive D: (again, 
NTFS). It's worked for me.


>Hope that helps....
>
>- Dennis
>
>
>
>-----Original Message-----
>From: owner-fw-1-mailinglist@lists.us.checkpoint.com
>[mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On Behalf Of
>Blazing Wolf
>Sent: Thursday, March 16, 2000 1:44 PM
>To: FW1 List
>Subject: [FW1] First WinNT Firewall-1 Install - Advice?
>
>
>
>Greetings All,
>
>I have 16+ firewalls builds, 5+ years installing and
>managing, as well as v2.0 through v4.1 experience with
>firewall-1 under my belt. All however have been with
>the Sparc Sun/Solaris configuration and platform.
>
>I'm about to build my first WinNT (x86 platform)
>firewall-1 system, not my choice, but at any rate I'm
>in need of any and all advice. What min service packs
>are required? What disk partitioning scheme? All NTFS,
>one partition, or boot FAT, with multiple NTFS
>partitions? Any and all comments, pointers appreciated
>
>BW
>
>__________________________________________________
>Do You Yahoo!?
>Talk to your friends online with Yahoo! Messenger.
>http://im.yahoo.com
>
>
>============================================================================
>====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>============================================================================
>====
>
>
>
>================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>================================================================================

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================