I can't seem to find that article thru the search feature...is there an sk number?

-----Original Message-----
From: Brian Granier [mailto:[EMAIL PROTECTED]
Sent: Tuesday, January 13, 2004 9:09 AM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] How to configure proper log rotation on Win2k mgmt
sta tion


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Nicolas and Samaan,

I'm a little confused by what you're saying. The logs on the
Management server can be configured to be written in another
directory. See ID Solution ID: 3.0.292111.2214283 in SecureKnowledge.
Additionally, rotating the logs is as simple as running "fw
logswitch" this can be done in a scheduled task and does not require
cpstop.

In regards to the original question. I personally shy away from the
GUI configuration for the log maintenance as I've had problems with
it in the past and use fw logswitch at scheduled intervals.

T. Brian Granier
GCIA, GCFW, GCIH, CCSE, CHP, MCSE (NT4&W2K), et al.
Information Security Architect
Zebec Data Systems, Inc.


- -----Original Message-----
From: Figaro, Nicolas [mailto:[EMAIL PROTECTED]
Sent: Tuesday, January 13, 2004 1:20 AM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] How to configure proper log rotation on Win2k
mgmt sta tion


Hi,

I wrote a script for the log rotate (as it's impossible, once the
firewall is installed, t have the log files written in another
directory).

It's written in perl and performs the following on the management
station : cpstop move logs cpstart Export logs Zip logs and exports
Ftp to another box.

It runs fine with active perl on win2k server.

If anyone is interested, I can post it on the list.

NF

- -----Original Message-----
From: Daniel Samaan [mailto:[EMAIL PROTECTED]
Sent: Monday, January 12, 2004 9:23 PM
To: [EMAIL PROTECTED]
Subject: [FW-1] How to configure proper log rotation on Win2k mgmt
station


Having a distributed environment with Nokia firewalls and Redundant
Win2k Mgmt stations and with both all firewalls configured to have
their logs sent to both mgmt stations (Logs and Masters->Masters
setting to point to both mgmt stations) what is the best way to
configure log switching and
how.   The way I understand it, the FIREWALL objects should NOT have
their
Logs and Master settings configured to do any type of log switching
because logs are not stored on the modules, only the mgmt servers
should be configured to do so...is this correct?  I'm specifically
referring to the Logs and Masters-->"Schedule Log Switch to" setting
on the Mgmt station object.

thanks

Daniel Samaan
[EMAIL PROTECTED]

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBQAQJ/KnLgFwVjaYREQKZpwCfW5YN/SRlJrkRlrRpus+l+0dHocAAoNHI
VG19BwQzPQPMkVahJvOnjWcn
=wlXq
-----END PGP SIGNATURE-----

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to