We've had similar problems on NG FP2.  The problem seemed to fix itself
after numerous Users Database installs.  We found this while working on
another issue - new FW objects (global and local) were not available in the
log viewer for filtering.  We now install the User DB whenever we add new
objects.

I believe the log switching problem is a bug in FP2 and was supposed to be
fixed in FP3, but I heard from someone who's played with FP3 that it is
still not fixed.  Honestly, I didn't expect the log switch problem to go
away, but it has.

Hope this helps,

[EMAIL PROTECTED]
Network Security
Best Buy Co., Inc.     952-324-0853


-----Original Message-----
From: Ryan, Kennedy [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 10, 2003 1:10 PM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] provider-1 mdsenv from cron/script


Thanks..  However, the GUI logswitch doesn't appear to work when logging to
a separate MDS.  There is a CLM object (the log module on 2nd MDS) that has
"logswitch" params set in gui client, but nothing happens when schedule is
set.  The MDS where CMA's are located is a type "manager" mds, and log MDS
is "container" type.  There is a "CLM" on the container MDS for each
corresponding CMA on the manager MDS.  The logging works fine, but we've
been unable to get it to switch.



thanks.

Ken Ryan
Viacom, Inc

-----Original Message-----
From: Torkel Mathisen [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 10, 2003 10:43 AM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] provider-1 mdsenv from cron/script


You can logswitch from within the GUI.

You should check out the "Logs and Master" properties on the CMA object.

Regards,
Torkel


> -----Original Message-----
> From: Ryan, Kennedy [mailto:[EMAIL PROTECTED]]
> Sent: 10. januar 2003 15:35
> To: [EMAIL PROTECTED]
> Subject: [FW-1] provider-1 mdsenv from cron/script
>
>
> Good Day,
>
> Provider-1 (NG FP2) alias 'mdsenv', which appears (among other things)
> to set $FWDIR variable to CMA dir (mdsenv cmaname), doesn't work
> from shell
> scripts or cron, making automated log switch impossible when using
> multi-domain log server.  To make logswitch work for
> individual CMA's, it's
> necessary to:
>
> mdsenv cmaname
> fw logswitch
>
> For each CMA.
>
>  Any thoughts on how to get mdsenv to work from script/cron are
> appreciated.
>
>
>
> thanks!
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to