Re: [FW-1] Nmap scan of NGX-Strange

2007-12-12 Thread Hugo van der Kooij
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 john maverick wrote: > Hi Ray, > > Thanks ..but unfortunately upstream router is not controlled by us and it > aggregates/distributes into our enterprise > I am still curious how when i have only explcitly allowed few ports to a > server and dropped e

Re: [FW-1] Nmap scan of NGX-Strange

2007-12-12 Thread john maverick
Hi Ray, Thanks ..but unfortunately upstream router is not controlled by us and it aggregates/distributes into our enterprise I am still curious how when i have only explcitly allowed few ports to a server and dropped everything else...no reject rules at all would that host return "Closed " ports

Re: [FW-1] boot security

2007-12-12 Thread Ray
Is this a Nokia? There is a known issue with upgrading a Nokia to R61 in that it does just what you said: It loads the initial policy instead of the existing one. I don't think the article applied to R62, though. I think the "workaround" in the Nokia article was to use a console cable to restore

Re: [FW-1] Nmap scan of NGX-Strange

2007-12-12 Thread Ray
You probably can do it by modifying the .def INSPECT files, but that will cause you issues when you apply HFAs or upgrades by making you do a bunch of stuff manually. It would be best to just block the ports on the next-hop router if it really bothers you. Ray > Date: Wed, 12 Dec 2007 10:05:51

Re: [FW-1] Error installing R65 NGX over Solaris Core

2007-12-12 Thread Edouard Zorrilla
Thanks a lot Sir, Let me add the path there. BTW the OS is Solaris 9, Regards - Original Message - From: "Simon Ashford" <[EMAIL PROTECTED]> To: Sent: Wednesday, December 12, 2007 1:17 PM Subject: Re: [FW-1] Error installing R65 NGX over Solaris Core If it's really looking for the

Re: [FW-1] Looking for information stored on forum

2007-12-12 Thread Reinhard Stich
hi, for example http://securepoint.com/lists/html/Firewall-1/ or http://fw1-gurus.phoneboy.com/archive/ br reinhard At 18:50 12.12.2007, you wrote: Does any one know where to find the archives for this list. I would like to look up for solutions inside this forum, Regards

Re: [FW-1] Error installing R65 NGX over Solaris Core

2007-12-12 Thread Simon Ashford
If it's really looking for the command called "reset" then you'll need "/usr/ucb" in your PATH (not included by default). But seems a bit rubbish if it's depending on old SunOS 4.x compatibility stuff like this... Simon Ashford. -Original Message- From: Mailing list for discussion of F

Re: [FW-1] Looking for information stored on forum

2007-12-12 Thread Robby Cauwerts
On Dec 12, 2007 6:50 PM, Edouard Zorrilla <[EMAIL PROTECTED]> wrote: > Does any one know where to find the archives for this list. I would like > to look up for solutions inside this forum, http://marc.info/?l=firewall-1&r=1&w=2 = To set vacation,

Re: [FW-1] Error installing R65 NGX over Solaris Core

2007-12-12 Thread Hugo van der Kooij
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Edouard Zorrilla wrote: > I keep getting this error when I install NGX R65 over my SunOS: > > cpconfig execution error: Failed to find reset command > Check your operating system and run cpconfig manually > > Can any one of you help me with this issu

Re: [FW-1] Error installing R65 NGX over Solaris Core

2007-12-12 Thread Paul Hanson
If you are doing a Solaris 10 build and choose the reduced network support group in the documentation there is no packages that have to be removed to harden the box. To harden the Solaris 10 operation system before installing VPN-1/Firewall-1 NGX: 1. Install Solaris 10 Reduced Network Support

[FW-1] Looking for information stored on forum

2007-12-12 Thread Edouard Zorrilla
Does any one know where to find the archives for this list. I would like to look up for solutions inside this forum, Regards = To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw

[FW-1] Error installing R65 NGX over Solaris Core

2007-12-12 Thread Edouard Zorrilla
I keep getting this error when I install NGX R65 over my SunOS: "cpconfig execution error: Failed to find reset command Check your operating system and run cpconfig manually" Can any one of you help me with this issue ? Regards Scanned by Check Point Total Security Gateway. =

Re: [FW-1] Error installing R65 NGX over Solaris Core

2007-12-12 Thread [EMAIL PROTECTED]
hi, reboot your system and try it again it should work fine regards Paolo Riviello Mob. +39.328.1749468 Home: http://www.paoloriviello.com Msn: [EMAIL PROTECTED] Skype: pao_rivi --I'm a rebel, soul rebel I'm a capturer, soul adventurerSee the morning sun, On the hillside if not living good, tr

[FW-1] Error installing R65 NGX over Solaris Core

2007-12-12 Thread Edouard Zorrilla
I keep getting this error when I install NGX R65 over my SunOS: cpconfig execution error: Failed to find reset command Check your operating system and run cpconfig manually Can any one of you help me with this issue ? Regards Scanned by Check Point Total Security Gateway. ===

Re: [FW-1] Monitor VPN-1 Edge

2007-12-12 Thread Lars Troen
Hi Steffen, I've been thinking of this too, but I don't think all kinds of values are available. I'm not sure what the best way of collecting values is. SNMP? Ssh session+info dev & info stat? If I figure a good way to retrieve the values I'll probably write something. Lars -Original Message-

[FW-1] Monitor VPN-1 Edge

2007-12-12 Thread Steffen
hi everybody, I have several VPN-1 Edge XU with image 7.0.39. Now I need to monitor the performance of these - throughput, CPU and so on. Does anyone know how to do this? The edge portal only shows memory counters... I'd like some mrtg / cacti script or similar. Edges are managed through LSM. che