Nope, no configuration of the add-in is needed. If you want to go back and
process existing logs (before fw.log) you have to set up a custom job while
still using the CONNECTIONS database. It's best to uninstall it to delete
the old database so you start anew. When you create the first consolidation
job, choose custom and one of the selections lets you pick the starting
file. That way it will process all of your switched logs before moving on to
fw.log.

It did 30 days of logs for me in less than half a day so I now never se it
off fw.log either.

Ray

From: Brad Pinkston <[EMAIL PROTECTED]>
Reply-To: Mailing list for discussion of Firewall-1
<[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] SmartView Reporter
Date: Thu, 2 Dec 2004 14:10:49 -0600

The smartview reporter add-on is installed on the management server.  I
haven't done any type of configuration for the add-on though.  Is this
needed?

When I open smartview reporter client it forwards me off to the smartview
reporter server ( it says reporter vis management on the bottom bar).  On
the management tab it only shos the processing of fw.log.  That is all it
says and it never changes.

Brad Pinkston
Firewall/Network Administrator
Checkpoint CCSA
Centenary College of LA
(318) 869-5721
[EMAIL PROTECTED]

----- Original Message -----
From: "Previtera, Sal" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, December 02, 2004 8:36 AM
Subject: Re: [FW-1] SmartView Reporter


Your Management server has to have the Reporter Add-in installed, so it
knows it has to forward data to your Reporter server.

Start the Smartview Reporter client, IP address should be your Management
server,  Click on the management Tab....it will tell you on which log file
is currently processing...
If you have a lots of log files on your Management server it may take long
time to catch up with all your log files.

The Reporter database is approximate 20 meg...so keep an eye on the
database, you may need to purge records or create a new database once it
reach its limit.
Regards


-----Original Message----- From: Brad Pinkston [mailto:[EMAIL PROTECTED] Sent: Thursday, December 02, 2004 8:22 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] SmartView Reporter

I've tried defining the reporter server as both.  I never could get a
definite answer on that, so I'll make sure it isn't a log server.  Will
reporter server R56 work well with R55 management server?  Any idea what I
should check to make sure the consolidator is pulling the logs from the
management server?

Brad Pinkston
Firewall/Network Administrator
Checkpoint CCSA
Centenary College of LA
(318) 869-5721
[EMAIL PROTECTED]

----- Original Message -----
From: "Ray" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, December 01, 2004 9:19 PM
Subject: Re: [FW-1] SmartView Reporter


Do you have both boxes defined as log servers? Only the SmartCenter box
should be a log server. The Reporter server will read the all of the logs
from the SmartCenter server and consolidate them into a database on the
Reporter box.

Are you on the R56 version of Reporter? It's prety slick performace-wise.

Ray

From: Brad Pinkston <[EMAIL PROTECTED]>
Reply-To: Mailing list for discussion of Firewall-1
<[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: [FW-1] SmartView Reporter
Date: Wed, 1 Dec 2004 10:19:04 -0600

I apologize up front if this turns into a simple answer.  My Checkpoint
setup is distributed from a Nokia Enforcement module to a SPLAT
Smartcenter
server then to a Windows 2000 Smartview Reporter server.  All
installations
are R55.  Log Consolidation properties have not been changed.  When I
generate reports then only data I get is the traffic that has been
generated or received at the Smartview Reporter server.  I'm not even
sure
where to start, being new to Reporter.  Does anyone have any
suggestions?

Brad Pinkston
Firewall/Network Administrator
Checkpoint CCSA
Centenary College of LA
(318) 869-5721
[EMAIL PROTECTED]

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================

================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================

================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================

Reply via email to