All things related to multicast

["Sanchez, Juan (District)" <>]

We have multicast working on CheckPoint, after months of pain. The
biggest issue that we have is that it will not work of an active-active
cluster. We are using PIM-SM with Nortel in the inside and Cisco in the
border.
Our solution was to install a third firewall just for multicast, any
subnet that requires multicast is sent to this firewall. Not an ideal
solution, but the best we could come up with. We are running NGX(R61).

Juan C. Sanchez
Enterprise Network Manager
Miami Dade College
Miami, FL 33176
305-237-0194
Please Note: 
Due to Florida's very broad public records law, most written
communications to or from College employees regarding College business
are public records, available to the public and media upon request.
Therefore, this e-mail communication may be subject to public
disclosure.
 

-----Original Message-----
From: Tim Chown 
[mailto:]
 
Sent: Wednesday, January 24, 2007 9:53 AM
To: 

Subject: Re: PIM on Checkpoing Firewall?

On Mon, Jan 22, 2007 at 02:52:04PM -0500, Chris Spears wrote:
> One of our local EDU's has a Checkpoint Firewall-1.  The datasheet 
> claims it supports PIM-SM, but their documentation is somewhat
lacking.
>  Also, since these devices are configured in software and pushed out, 
> I don't have access to the configuration utility (on their campus).
> 
> Has anyone had experience configuring PIM on a Checkpoint Firewall?

On a related note, we've had issues with IPv4 PIM-SSM and Checkpoint.

We have Checkpoint Secure Platform, but have been told by Checkpoint,
after months of chasing up, that PIM-SSM is not supported.   It seems
the source specific joins are not propogated properly.   Apparently
they are considering adding to their roadmap.   If anyone else has
info on this we'd like to know...

--
Tim