Re: [FW-1] route based vpn with vpn1 edge

2007-01-03 Thread pkc_mls
Hugo van der Kooij a écrit : On Tue, 2 Jan 2007, pkc_mls wrote: Sounds like you need to rethink the antispoofing settings. Nothing rulebase related in this log line. sure, but you can't modify the antispoofing settings for the vpn1 edge. the interfaces are set as external or antispoofing

Re: [FW-1] Logs

2007-01-03 Thread Edouard Zorrilla
Thanks a lot to all. Regards - Original Message - From: Cassell, Damon Z. [EMAIL PROTECTED] To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Sent: Tuesday, January 02, 2007 9:02 AM Subject: Re: [FW-1] Logs Checkpoint #skI4457 describes (briefly) what these logs are. They are pointers

[FW-1] Automating upgrade_export to backing up FW-1 AI R54 configuration in Solaris 2.8

2007-01-03 Thread Edouard Zorrilla
Hello, I'm struggle with getting a crontab working to automate the upgrade_export process on Checkpoint NG R54; even though I'm not a shell guru, I believe my issue is with syntax of getting the crontab to execute the upgrade_export command. I've pasted what I have done:

[FW-1] Console access to EDGE via modem

2007-01-03 Thread Michael Schwartzkopff
Hi, EDGE boxes have a serial port. So you can get direct CLI access. Did anybody succeed in attaching a modem to that serial interface and to get CLI access via dialing in? And short hints or howto? Thanks. Michael Schwartzkopff = To set

Re: [FW-1] Automating upgrade_export to backing up FW-1 AI R54 configuration in Solaris 2.8

2007-01-03 Thread cisco4ng
I do not use R54 but I am using R55w and Provider-1 and the way to automate the upgrade_export process would be: source /opt/CPshrd-R55/tmp/.CPprofile.csh cd /tmp echo /opt/CPmds-R55 | /opt/CPmds-R55/scripts/mds_backup The key line here is: source /opt/CPshrd-R55/tmp/.CPprofile.csh You may

Re: [FW-1] route based vpn with vpn1 edge

2007-01-03 Thread Hugo van der Kooij
On Wed, 3 Jan 2007, pkc_mls wrote: Hugo van der Kooij a écrit : On Tue, 2 Jan 2007, pkc_mls wrote: Sounds like you need to rethink the antispoofing settings. Nothing rulebase related in this log line. sure, but you can't modify the antispoofing settings for the vpn1 edge. the

Re: [FW-1] Automating upgrade_export to backing up FW-1 AI R54 configuration in Solaris 2.8

2007-01-03 Thread Hugo van der Kooij
On Wed, 3 Jan 2007, Edouard Zorrilla wrote: --- bash-2.03# more /export/home/ezorrilla/cpbackup.sh FWDIR=/opt/CPfw1-54 export FWDIR YYMMDD=`getdate` $FWDIR/bin/upgrade_tools/upgrade_export -n /export/home/ezorrilla/BKP-CONFIG-$YYMMDD bash-2.03#

Re: [FW-1] Console access to EDGE via modem

2007-01-03 Thread Hugo van der Kooij
On Wed, 3 Jan 2007, Michael Schwartzkopff wrote: EDGE boxes have a serial port. So you can get direct CLI access. Did anybody succeed in attaching a modem to that serial interface and to get CLI access via dialing in? And short hints or howto? Thanks. Your average modem will not work. You

Re: [FW-1] Console access to EDGE via modem

2007-01-03 Thread Michael Schwartzkopff
Am Mittwoch, 3. Januar 2007 19:29 schrieb Hugo van der Kooij: On Wed, 3 Jan 2007, Michael Schwartzkopff wrote: EDGE boxes have a serial port. So you can get direct CLI access. Did anybody succeed in attaching a modem to that serial interface and to get CLI access via dialing in? And short

Re: [FW-1] Logs

2007-01-03 Thread Zeltser, Roman
I would suggest leaving them in your directory. In a past I had the problems when some of them were deleted (especially, it's important for the UNIX-based OS). Best regards, Roman M. Zeltser, Sr. LAN/WAN Engineer @National Computer Center DPCP/DPCMB/DOCPM, RSIS 410-966-6192 Information Security

Re: [FW-1] NGX Exam

2007-01-03 Thread Zeltser, Roman
Look here: http://www.rtek2000.com/transcender2.html#certification-training-Checkpo int Transcender's tests are traditionally the best among all vendors. Best regards, Roman M. Zeltser, Sr. LAN/WAN Engineer @National Computer Center DPCP/DPCMB/DOCPM, RSIS 410-966-6192 Information Security Index

[FW-1] LEA_CLIENT

2007-01-03 Thread Pedro Boavida
Hi, I've an application that uses LEA_CLIENT to connect to SmartCenter Server on Windows Platform. This application used to work fine until I migrated to P-1. I try to point the LEA_CLIENT to the IP address of the CMA, but the application doesn't work anymore. Does anyone have been through

Re: [FW-1] NGX Exam

2007-01-03 Thread Jeremy Lieb
Test King was excellent!! Jeremy Lieb CCSE-NGX, CCSE+NG Firewall Administrator Open Text Corporation 100 Tri-State International Parkway Third Floor 18472679330 ext 4295 -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Zeltser,

Re: [FW-1] Console access to EDGE via modem

2007-01-03 Thread Hugo van der Kooij
On Wed, 3 Jan 2007, Michael Schwartzkopff wrote: Am Mittwoch, 3. Januar 2007 19:29 schrieb Hugo van der Kooij: On Wed, 3 Jan 2007, Michael Schwartzkopff wrote: EDGE boxes have a serial port. So you can get direct CLI access. Did anybody succeed in attaching a modem to that serial interface

Re: [FW-1] Automating upgrade_export to backing up FW-1 AI R54 configuration in Solaris 2.8

2007-01-03 Thread Edouard Zorrilla
Thanks Sir, Excuse me, but now I keep getting source: not found, could you please tell me what is your complete script otherwise how to overcome this problem, I guess you have faced with this issue before. Regards - Original Message - From: cisco4ng To: Mailing list for

[FW-1] Object Filler v2.4 released!

2007-01-03 Thread Martin Hoz
-BEGIN PGP SIGNED MESSAGE- Hi everybody! I am happy to announce the availability of Object Filler and Object Dumper version 2.4 - Please find attached the What's New doc. For those of you that don't know the tools, Object Dumper is a tool that dumps the configuration (objects an rules)

Re: [FW-1] Automating upgrade_export to backing up FW-1 AI R54 configuration in Solaris 2.8

2007-01-03 Thread Warrington Bruce - bwarri
When you login, you run your .profile (or .csh, whatever), which normally sources the .CPprofile.sh script to set all your variables like $FWDIR, $CPDIR, and so on. To run your script from cron, your script needs to do that as well so it has the same variables you would after logging in