NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] No logging after changing management server



Problem solved!!

Andy,

Thanks for your response below. I checked all of  those things that you
mentioned and it all checked out. It turns out that there was another
firewall in between that was blocking port 257, which is the port FW1 uses
for transferring its logs and port 256. I just allowed service ( FW1_log &
FW1_mgmt ) on the way back and it is working now.

-----Original Message-----
From: Andy Obad [mailto:[email protected]]
Sent: Tuesday, August 21, 2001 8:20 AM
To: [email protected]
Subject: Re: [FW1] No logging after changing management server



Josh,

On your FW module you must confirm that the remote server option is the 
Management Server. Also, you need to add the ip address of the Mgmt server 
in the MASTERS file. This will force the Firewall module  to pull policy 
down from the Mgmt station, then (if fails ) it will look locally.

ON Firewall Module:

FWDIR$/conf/Masters
vi Masters
   <management servers IP address>
   <localhost IP>

esc :q

cpconfig
---- remote modules
  ----- <management server's ip address>

fwstop
fwstart

ON Mgmt Station:

cpconfig
   ----- remote modules
     ------- add firewall modules IP address

fwstop
fwstart

This should start logging to the Mgmt Station.

Good luck
A.





From: "Cepeda, Josh" <[email protected]>
To: [email protected]
Subject: [FW1] No logging after changing management server
Date: Mon, 20 Aug 2001 20:11:14 -0500


Just changed my management server and the firewall module is no longer
logging to the management server. Also,  I can push the policy from the
management server to the firewall module , but fails to fetch the policy
when bouncing the firewall module. Please help.


============================================================================
====
      To unsubscribe from this mailing list, please see the instructions at
                http://www.checkpoint.com/services/mailing.html
============================================================================
====



_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.