Problem solved!!
Andy,
Thanks for your response below. I checked all of those things that you
mentioned and it all checked out. It turns out that there was another
firewall in between that was blocking port 257, which is the port FW1 uses
for transferring its logs and port 256. I just allowed service ( FW1_log &
FW1_mgmt ) on the way back and it is working now.
-----Original Message-----
From: Andy Obad [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 21, 2001 8:20 AM
To: [EMAIL PROTECTED]
Subject: Re: [FW1] No logging after changing management server
Josh,
On your FW module you must confirm that the remote server option is the
Management Server. Also, you need to add the ip address of the Mgmt server
in the MASTERS file. This will force the Firewall module to pull policy
down from the Mgmt station, then (if fails ) it will look locally.
ON Firewall Module:
FWDIR$/conf/Masters
vi Masters
<management servers IP address>
<localhost IP>
esc :q
cpconfig
---- remote modules
----- <management server's ip address>
fwstop
fwstart
ON Mgmt Station:
cpconfig
----- remote modules
------- add firewall modules IP address
fwstop
fwstart
This should start logging to the Mgmt Station.
Good luck
A.
From: "Cepeda, Josh" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: [FW1] No logging after changing management server
Date: Mon, 20 Aug 2001 20:11:14 -0500
Just changed my management server and the firewall module is no longer
logging to the management server. Also, I can push the policy from the
management server to the firewall module , but fails to fetch the policy
when bouncing the firewall module. Please help.
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
