Hi,
As stated in
numerous previous threads the opsec feature between RealSecure and Checkpoint
doesn't work for all of us. I have spent numerous hours on this to no
avail. Currently when my Solaris 6.5 network sensor
detects an opsec event he does everything he is supposed to do.
But the inhibit does not occur. All settings are
correct on both machines and the manual inhibit from the firewall
management station to the firewall works. The only error message I
can find is on the RealSecure box in /var/adm/messages. I see the
following:
Oct 23
10:47:53 twinspot syslog[749] rsopsec_sam_session::sam_ack_event
SAM_RESOLVE_ERR
Oct 23 10:47:53 twinspot syslog[749]
rsopsec_sam_session::sam_ack_event
SAM_RESOLVE_ERR
ISS could not identify the error message (or much
else). Any suggestions would be appreciated.
Kevin J. Rosel, CISSP, CCNA
"If you didn't log it, it never
happened"
