How to SYNC on Solaris 2.6/cluster patches and FW1-v3.0b 3064 patch

I want to pass on some info about SYNC on Solaris 2.6/cluster patches
and FW1-v3.0b 3064 patch. This is undocumented but a must!

This seems to be crucial on systems where the control module and pfm
are not on the same system...

Our config has three systems. Non-vpn and no NAT just packet
filtering...

control
pfm
pfm

Creating /etc/fw/sync.conf and putkey on the pfm modules is not enough!

Modify the file below table.def and comment out the "#define sync"
command.
Then recompile and download your rule sets to the pfm modules...

This seems to be crucial on systems where the control module and pfm
are not on the same system...so if you have two systems

control/pfm
pfm

you will need to do this table.def mod...

$ more /etc/fw/lib/table.def
#ifndef __table_def__
#define __table_def__

//
// (c) Copyright 1993-1997 Check Point Software Technologies Ltd.
// All rights reserved.
//
// This is proprietary information of Check Point Software Technologies
// Ltd., which is provided for informational purposes only and for use
// solely in conjunction with the authorized use of Check Point Software
// Technologies Ltd. products. The viewing and use of this information
is
// subject, to the extent appropriate, to the terms and conditions of
the
// license agreement that authorizes the use of the relevant product.
//
//
// $Header: /fw/cvs/fw-1/fwlib/table.def,v 1.42.2.20 1998/01/01 08:09:47
ofer Ex
p $
//

// The following #define should be removed to enable FW-1
synchronization
//#define sync

Backup script for Solaris

#!/usr/bin/sh
# author : Christian ALT
# module name: /export/bin/backupfw
# Copyright : Telecom and Logistics Associates, all rights reserved
# Installation : DO NOT FORGET .netrc
# Will backup necessary files for FW-1 and Solaris. It will then transfer the files to my-backup-host by doing an ftp
# from the firewall to an FTP server.
# This script must be scheduled in crontab with an entry like the following
#      0 5 * * * /export/bin/backupfw
# 8.9.99 Adaptation to fw-1 version 4.0
# 25.10.99 added backup of /etc/hosts and /etc/hostname.*
# 27.10.99 added backup of /usr/local/etc

## User part to adapt to system

HOST=my-backup-host
FWDIR=/opt/CKPfw
FWTK=/usr/local/etc
BACKUP=/export/backup
GUI=/opt/CKPfwgui/clients
VAR=/var/opt/CKPfw
BIN=/export/bin
SAVE=backup-ssn/pluton-1/conf

# End of user modifications

# we clean the backup directory before to backup anything
rm $BACKUP/*
tar cvf $BACKUP/fw.tar $FWDIR /etc/fw.boot $GUI $VAR
compress $BACKUP/fw.tar

# If on your firewall you have a DNS installation uncomment the following 2 lines
#tar cvf $BACKUP/named.tar /var/named /etc/resolv.conf /etc/named.boot
#compress $BACKUP/named.tar

# Solaris configuration
cp /etc/rc3.d/S99route $BACKUP
cp /etc/inetd.conf $BACKUP
cp /etc/services $BACKUP
cp /etc/defaultrouter $BACKUP
cp /etc/nsswitch.conf $BACKUP
cp /etc/hosts $BACKUP
cp /etc/hostname.* $BACKUP
cp /etc/security/audit_control $BACKUP
cp /.profile $BACKUP
cp $BIN/backuplog $BACKUP
cp $BIN/backupfw $BACKUP
cp /var/spool/cron/crontabs/root $BACKUP

echo "starting FTP"

# FTP transfer part to
cd $BACKUP
ftp -i $HOST <cd $SAVE
bin
mput *
bye
!

echo "Transfer finished"
echo "Removing files in Backup"
rm $BACKUP/*