RE: [FW1] Recommended NT Disk Partitions

["Little, Craig (SSI-SIAP-NP5)" <craig.little@FW1-NOSPAMssi.co.nz>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I also set up a small (c. 2GB) partition as E: so that I can ghost
the machine prior to making major changes. This is much faster than
ghosting to a network drive and means the machine is out of
commission for less time. I install FW-1 on my D: partition (c. 12GB)
so that the log files can live there. All log files are set up to
write to the D: drive, so that the system partition won't fill up and
you don't run into fragmentation problems.

Craig.

- -----Original Message-----
From: Frank Knobbe [mailto:FKnobbe@KnobbeITS.com]
Sent: Friday, 15 September 2000 9:53 a.m.
To: 'Paul Thresher'; fw-1-mailinglist@lists.us.checkpoint.com
Subject: RE: [FW1] Recommended NT Disk Partitions



- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> -----Original Message-----
> From: Paul Thresher [mailto:pault@seachange.com]
> Sent: Thursday, September 14, 2000 1:23 PM
> 
> I am setting up a new FW-1/VPN-1 4.1 standalone system on
> NT version 4.0 with a 9gb disk and 256mb of memory.
> I am looking for any recommendations on the number of
> partitions to use and their size.

Paul,

I always install NT on a 2-4 GB System partition and allocate the
rest as a Data partition. The System partition C: will contain NT and
services (i.e. Exchange, FW-1, whatever runs on the box). All data
that is generated (i.e. Exchange databases, log files, etc) and user
data (if the servers is F/P) resides on the Data partition D:. No one
should be able to write files to the C: partition to prevent the disk
space from filling up and NT from crashing. Also for security
reasons.

> Also is it possible to send the logs to a partition other than the
> one the  firewall is installed in without writing a script to 
> move them
> from one place to another?

I'm not aware of a method to direct the active logs to a different
location. However, I usually configure firewalls to run a batch file
at midnight (scheduler service) that calls logswitch and moves the
exported log to a log directory on the D: drive. That will keep the
disk space on C: in check.

Hope that helps,
Frank


-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBOcCob4AS1Tpq5ZYvEQIg4wCg+9uDqO35pdb383OWEKBXmJoztXwAoIkr
9HILf7aTZlkSXz7LMUVS7dQu
=mcC/
-----END PGP SIGNATURE-----


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================