From ca9eefe22759087f0f55e7d41a0171d94ccb684f Mon Sep 17 00:00:00 2001
From: Vadim Kurland <vadim@netcitadel.com>
Date: Tue, 29 Dec 2009 02:21:35 +0000
Subject: [PATCH] release notes

---
 build_num                                   |  2 +-
 src/res/help/en_US/release_notes_3.1.0.html | 16 ++++++++++++++++
 2 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/build_num b/build_num
index d9ced926e..c0a5ffc58 100644
--- a/build_num
+++ b/build_num
@@ -1 +1 @@
-#define BUILD_NUM 2285
+#define BUILD_NUM 2286
diff --git a/src/res/help/en_US/release_notes_3.1.0.html b/src/res/help/en_US/release_notes_3.1.0.html
index 8d7329e66..cebf667f5 100644
--- a/src/res/help/en_US/release_notes_3.1.0.html
+++ b/src/res/help/en_US/release_notes_3.1.0.html
@@ -849,6 +849,22 @@ rule sets of this object rather than in the actual firewalls.
   enabled after configuration is reloaded from the file.
 </p>
 
+<p>
+  When certain PIX configuration commands are executed again during
+  configuration update, PIX detects this as an error. Commands that
+  fall into this category are "inspect", "service-policy" and some
+  "failover" commands, to name a few. To avoid this kind of errors
+  while updating PIX using built-in installer and avoid entering
+  commands for parts of configuration that do not change often, you
+  can use <b>checkbox "Generate only access-list,
+  access-group... commands"</b> in the "Script" tab of the PIX
+  firewall "advanced" options dialog. If this checkbox is on,
+  generated configuration file will only include "access-list",
+  "access-group", "telnet", "ssh", "nat", "global" and "static"
+  commands.
+</p>
+
+
 <a name="fwbedit"></a>
 <h2>Changes in the command linbe tool fwbedit</h2>