On Tue, Dec 13, 2011 at 11:47 PM, suwaji harsono <[email protected]> wrote: > Daer dan > > For my ossec this read log router Cisco device, > Yes, this is for my configure > > /var/ossec/bin/ossec-control enable agentless > > /var/ossec/agentless/register_host.sh add [email protected] [ip router] > > sudo -u ossec ssh [email protected] > > this no use ossec manager, I have read from official manual guide > http://www.ossec.net/main/manual/manual-agentless-monitoring >
It looks like you didn't do section 2: "2-Configuring agentless" > actually ossec can get log from cisco, but how to configure about checkpoint > as well as firewall..i'm stuck for this case > Checkpoint should be able to send logs via syslog. This may help, it may not: http://devio.us/~ddp/ossec/docs/manual/notes/checkpoint_configure.html It would be great if someone with checkpoint experience chimed in. > > Thank > > Harsono > > On Tue, Dec 13, 2011 at 2:57 AM, dan (ddp) <[email protected]> wrote: >> >> Can you provide the configuration for this agentless system (do NOT >> include passwords). >> >> On Thu, Dec 8, 2011 at 11:26 PM, harsono <[email protected]> wrote: >> > Dear all >> > cc to daniel founder ossec >> > >> > I have install ossec this good monitoring syslog, but i have problem >> > since I don't what I have to do. >> > to all person experience hands on about this can help this issue? >> > sorry my English not good, :D >> > >> > 2011/12/09 11:10:37 ossec-agentlessd: ERROR: ssh_generic_diff: >> > [email protected]: ssh_integrity_check <hostname> <arguments> >> > 2011/12/09 11:10:38 ossec-agentlessd: ERROR: ssh_generic_diff: >> > [email protected]: ssh_integrity_check <hostname> <arguments> >> > 2011/12/09 11:10:40 ossec-agentlessd: ERROR: ssh_generic_diff: >> > [email protected]: ssh_integrity_check <hostname> <arguments> >> > 2011/12/09 11:11:03 ossec-agentlessd: ERROR: >> > ssh_integrity_check_linux: [email protected]: Timeout while connecting >> > to host: [email protected] >> > >> > >> >> ^^ Are you sure you can reach this system via SSH from the OSSEC manager? >> >> > Thx >> > >> > Harsono > > > > > -- > Thank You > > Harsono, Suwaji >
