I am running R55 HFA04 with SecureClients R55 and R56 and am testing SCV
checks.
I can get the "standard" SCV checks to work, but have a problem configuring
multiple
mismatch messages for checking multiple processes. Here is part of my
local.scv file
)
: (ProcessMonitor
:type (plugin)
:parameters (
:begin_and (1)
:OfcDog.exe (true)
:ntrtscan.exe (true)
:end (1)
:begin_admin (admin)
:send_log (alert)
:mismatchmessage ("TREND ANTIVIRUS IS NOT
RUNNING!")
:end (admin)
:begin_and (2)
:kazaa.exe (false)
:trash.exe (false)
:end (2)
:begin_admin (admin)
:send_log (alert)
:mismatchmessage ("You have unauthorized
processes running!")
:end (admin)
:begin_and (3)
:services.exe (true)
:explorer.exe (true)
:end (3)
:begin_admin (admin)
:send_log (alert)
:mismatchmessage ("You do not have necessary
processes running!")
:end (admin)
)
In my example above, if any check fails the SecureClient will only receive
the third mismatchmessage.
CheckPoint support only sent me a VPN pdf file (which I already had).
Any ideas?
Thanks in Advance
Joe Pope
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
