[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] First WinNT Firewall-1 Install - Advice?





That is very interesting about the installation directory you
can use.

We originally installed FW-1 on the d: drive for lots of reasons,
including the reason mentioned below.  It was version 4.0, SP#1.
When we tried to install SP#4, the installation failed.  So we called
Checkpoint.  Their engineers told us that the we could not install
SP#4 if we didn't use the default installation directory at the time
of the original installation.  They told us the only way around the
problem was to re-install FW-1 and then apply the service pack.  Naturally,
we weren't too happy about this and asked them "Why do you let us
select an installation directory if it will hang us down the road?"
They were very embarrassed (and gracious) about the situation.

Can anyone else shed any light on this?

- Dennis


-----Original Message-----
From: owner-fw-1-mailinglist@lists.us.checkpoint.com
[mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On Behalf Of
Really Boring
Sent: Friday, March 17, 2000 5:39 AM
To: dennis@innovativesolutions.com; blazing_wolf@yahoo.com;
fw-1-mailinglist@lists.us.checkpoint.com
Subject: RE: [FW1] First WinNT Firewall-1 Install - Advice?



See comments below:

>From: "Dennis Pasadis" <dennis@innovativesolutions.com>
>To: "Blazing Wolf" <blazing_wolf@yahoo.com>,        "FW1 List"
><fw-1-mailinglist@lists.us.checkpoint.com>
>Subject: RE: [FW1] First WinNT Firewall-1 Install - Advice?
>Date: Thu, 16 Mar 2000 13:59:00 -0800
>
>
>BW:
>
>Checkpoint recommends NT SP#5 with FW-1 SP#5 if you are running
>version 4.0.  That was as of two weeks ago.  I just did it and
>it works great.

I agree - use FW-1 SP5 and NT 4.0 SP5.

  One tip - make sure you install the FW software
>in the default directory.  I didn't the first time and had to
>re-install to be able to install the service packs.  Why do they
>ask us where to put FW-1 if the SP's won't work?

I have not had this problem. I prefer to install FW-1 on a second drive
(physical or virtual). Haven't seen any problem with installing the service
packs.

>
>I've thoroughly research the FAT vs NTFS issue.  Microsoft
>and HP support engineers all recommended making the c: drive
>FAT and d: and other drives NTFS.  Why?  Because it is much
>easier to repair a damaged partition if it is DOS.  You can
>boot from floppy and check it and copy files.  But all files
>users access should be in NTFS partitions.

I haven't done the thorough research on FAT vs. NTFS, so I guess I'll stay
quiet other than to mention that you lose all the benefit of being able to
set access control lists on files and directories if you use FAT (which
Dennis obviously realizes as shown by his next comment).

>
>My tendency is to modify that recommendation on a firewall and
>put NT and the FW on c: and make it NTFS.  After all, a firewall
>is supposed to be secure, so why not do it that way.  There are
>tools available that allow you to read and write NTFS partitions
>from boot floppies.
>

I have had CheckPoint trainers recommend _not_ putting FW-1 on the same
drive as the OS. What do you do if you accidentally let your FW-1 logs fill
up drive C:? This could make your system unbootable, blah, blah, blah. I
like to put the OS on drive C: (NTFS), and put FW-1 on drive D: (again,
NTFS). It's worked for me.


>Hope that helps....
>
>- Dennis
>
>
>
>-----Original Message-----
>From: owner-fw-1-mailinglist@lists.us.checkpoint.com
>[mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On Behalf Of
>Blazing Wolf
>Sent: Thursday, March 16, 2000 1:44 PM
>To: FW1 List
>Subject: [FW1] First WinNT Firewall-1 Install - Advice?
>
>
>
>Greetings All,
>
>I have 16+ firewalls builds, 5+ years installing and
>managing, as well as v2.0 through v4.1 experience with
>firewall-1 under my belt. All however have been with
>the Sparc Sun/Solaris configuration and platform.
>
>I'm about to build my first WinNT (x86 platform)
>firewall-1 system, not my choice, but at any rate I'm
>in need of any and all advice. What min service packs
>are required? What disk partitioning scheme? All NTFS,
>one partition, or boot FAT, with multiple NTFS
>partitions? Any and all comments, pointers appreciated
>
>BW
>
>__________________________________________________
>Do You Yahoo!?
>Talk to your friends online with Yahoo! Messenger.
>http://im.yahoo.com
>
>
>===========================================================================
=
>====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>===========================================================================
=
>====
>
>
>
>===========================================================================
=====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>===========================================================================
=====

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================