Re: [FW-1] AW: [FW-1] Firewall Logs

["Scheidel, Greg (Contractor)" <Greg.Scheidel@FW1-NOSPAMED.GOV>]

> I won't bother starting the fw logexport on an EPC or management station
as
> long as it is running under Unix you can use "nice" to give it somewhat
low
> priority.

If you don't have another box available, sure.  But if you do, why would you
not take advantage of it?  Sure you could run the 'fw logexport' on the
actual
firewall and 'nice' the process so that it doesn't (unacceptably) impact
production operations, but what happens when the 'fw logexport' process with
the given low priority doesn't therefore finish in an amount of time that
makes the export actually useful?

If you're running the export you're looking to actually make use of the
information - either because it's part of a daily report or to aid in
troubleshooting.  Either way you don't want to sit on your thumbs waiting
for
the export to finish.  Move the file over to another box where you can give
the 'fw logexport' a high priority, and work with the data 'off-line'.

Greg S.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================