No, no changes are made to the rules at all. You still have to enable it
manually.
Ray
From: john maverick <[EMAIL PROTECTED]>
Reply-To: Mailing list for discussion of Firewall-1
<[email protected]>
To: [email protected]
Subject: Re: [FW-1] Smartview reporter clarification!!
Date: Tue, 7 Feb 2006 07:18:02 +0530
Hi,
Thanks for the repy ...one of my query was did smart view reporter
installation "turn on accounting on all rules be default " for bit/byte
info
Vs selective accounting for webtrends based
Any pointers appreciated
regards
On 2/7/06, Ray <[EMAIL PROTECTED]> wrote:
>
> You have to manually enable Accounting instead of logging, which is
> supposed
> to cause a performance hit regardless of what is doing the reporting.
> Whether you're going to see a hit depends on how much spare capacity you
> have in your box. I didn't see any peformance hit at all but I also
don't
> have Accounting on everything. I do have it on all of my remote access
and
> VPN rules because I want to see what they're doing bandwidth-wise.
>
> If the SmartView Reporter is on a separate box than the enforcement
module
> or the SmartCenter, the only hit you will see is as the logs are shipped
> across the network to the Reporter loging box. This is what I do. I just
> have SmartView Reporter R56 installed on an IBM Desktop with 2 GB of RAM
> and
> it runs fine. It doesn't affect the SmartCenter at all.
>
> Briefly, you do the Reporter install on the separate box. Then you start
> the
> Reporter install on the SmartCenter. It actually looks like it's going
to
> install the whole thing, copying files an everything, on the SmartCenter
> then all of a sudden it stops and gives you the choice to install just
the
> "add-on", which is what ships the logs to the database.
>
> Ray
>
> >From: john maverick <[EMAIL PROTECTED]>
> >Reply-To: Mailing list for discussion of Firewall-1
> ><[email protected]>
> >To: [email protected]
> >Subject: [FW-1] Smartview reporter clarification!!
> >Date: Mon, 6 Feb 2006 22:35:24 +0530
> >
> >Hi,
> >We have checkpoint R55 and using webtrends reporting we are looking at
> >getting bit/byte info(historical reports) on some rules..we understand
> that
> >would require accounting to be enabled in those rules.We have a query
if
> we
> >go in for "Smart view reporter" does it enable accounting by default on
> all
> >rules to achieve the same (without actually selecting "accounting"
> instead
> >of logging-when i wud do the same for webtrends)
> >Does this increase the overhead on the firewall module ????
> >a) with accounting on individual rules
> >b)smart view reporter enabled with license
> >
> >Thanks and regards
> >
> >=================================================
> >To set vacation, Out-Of-Office, or away messages,
> >send an email to [EMAIL PROTECTED]
> >in the BODY of the email add:
> >set fw-1-mailinglist nomail
> >=================================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http://www.checkpoint.com/services/mailing.html
> >=================================================
> >If you have any questions on how to change your
> >subscription options, email
> >[EMAIL PROTECTED]
> >=================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================