Servert not responding

[dwadel]

I am looking for some urgent help. My management/server station will not connect. Message says to check if server is started. It is not and I can not start the server or related checkpoint services. There have been no changes to the workstation. I have access to all the files and backups but would rather not have to reinstall and restore the backups. This was originally installed by a consultant and I would most likely have to bring them back in for the reinstall. Any help or direction would be appreciated.

Duane

 

[wirelesspeap]

Let me take a guess. You are running Checkpoint
Management Server on Microsoft Windows right?

I've been working as a consultant for almost 3 years now
(the last 10 months has been on Checkpoint Firewalls), and
I have to say that I've been run into about 20 situations
where either the enforcement modules or the Management Server that run on Microsoft Windows just crap out or crash for no other reasons and the only way to fix it is to
restore.

My advice to you is simply to go with SecurePlatform. Once
you get your system up and running, run "upgrade_export" and do "upgrade_import" on a new system. Of all the customers that I have been working with who use Secureplatform, almost of all of them are very happy with
SPLAT, except those who are not Unix/Linux friendly.

HTH

 

[dwadel]

Thaks for that info and I will take your advice but I still cannot get the server started so I can't run the utilities. Looks like I will have to reinstall although my Nokia device continues to function obviously I cannot monitor, manage or change my rules base.

Two questions. First, what files do I need to copy off before installing in order to restore the database once reinstalled. Secondly, can someone point to a document with instructions on reinstalling.

Thanks for your help.

Duane

 

[wirelesspeap]

Duane,
If upgrade_export is not an option in your situation, do the following:

1) on your production system, backup the $FWDIR/conf directory. Move it to a safe place and/or burn it into CD if you have to

2) Uninstall CP from your production system from windows control pannel.

3) Reboot

4) download Checkpoint cpclean and remove CP completely uninstall anything registry from the system. cpclean does a pretty nice job,

5) Reboot

6) Install Checkpoint Management Server. Reboot after that.

7) Apply any HFA so that it matches with whatever you have
on the system before.

8) reboot

9) run "cpstop" to stop checkpoint services.

10) copy the previous files/folder from the previous conf directory into your current $FWDIR/conf directory

11) reboot

That will do the job. now you can push policy and monitor your nokia firewalls.

Good Luck!!!!!

 

[dwadel]

Much appreciate the response and the instructions. Here's hoping it is as easy as you make it seem.