Re: [FW-1] Archiving provider-1 fw logs

2008-02-07 Thread pkc_mls
Tom Louis a écrit : I have finally filled up out 800 Gig of disc on my Log server and was curious as to what people are doing for archiving these files. Depends how you other logs or files are archived, but a tape archive could be a good idea. Ask also if there is a policy regarding the re

Re: [FW-1] Urgent: checkpoint cpinfo assistance needed.

2008-02-07 Thread Rajeev Gupta
Contact me offline and I would try to go over some possible tips and tricks to make it work. thx. rajeev On Feb 6, 2008 5:13 PM, cisco4ng <[EMAIL PROTECTED]> wrote: > I have a P-1 (manager + Container) in the same box running R55 with > HFA_20. > I have a single CMA in there. > > I need to genera

Re: [FW-1] ssl extender license

2008-02-07 Thread Gary Scott
Thanks Minh, but the question still stands, how do you clear this without waiting 30 days? You could have a change in your user database that would not allow any new user to connect since the old user is cached up in this table. -GS -Original Message- From: Mailing list for discussion of

Re: [FW-1] ssl extender license

2008-02-07 Thread Minh Quang Nguyen
All right, Finally got a confirmed answer directly from CP. SNX Licence is counted differently depending on the product: -Connectra: Number of concurrent connected users -VPN1: Licensed by user The way it works is that everytime a user authenticates to the gateway via SNX, the username is entere

Re: [FW-1] Archiving provider-1 fw logs

2008-02-07 Thread sin
Tom Louis wrote: I have finally filled up out 800 Gig of disc on my Log server and was curious as to what people are doing for archiving these files. rotate them and move them to a backup device :) Scanned by Check Point Total Security Gateway. ===

[FW-1] Archiving provider-1 fw logs

2008-02-07 Thread Tom Louis
I have finally filled up out 800 Gig of disc on my Log server and was curious as to what people are doing for archiving these files. I am running R-65 on SPLAT. Just looking for Ideas to formulate a solution Thank You in advance for any suggestions at all. We use Veriats Netbackup. Scanne

Re: [FW-1] Urgent: checkpoint cpinfo assistance needed.

2008-02-07 Thread sin
cisco4ng wrote: That's what I was told by TAC: "if you can NOT read the cpinfo output file with infoview/p-1_infoview, neither can we" other than ask them for a fix for your cpinfo issue i don't know what else could you do. = To set vacation, O

Re: [FW-1] Urgent: checkpoint cpinfo assistance needed.

2008-02-07 Thread Sidney Boumendil
On Feb 7, 2008 2:44 PM, cisco4ng <[EMAIL PROTECTED]> wrote: > That's what I was told by TAC: "if you can NOT read the cpinfo output file > with > infoview/p-1_infoview, neither can we" You could try to upgrade your cpinfo binary. Sidney = To set

Re: [FW-1] Urgent: checkpoint cpinfo assistance needed.

2008-02-07 Thread cisco4ng
That's what I was told by TAC: "if you can NOT read the cpinfo output file with infoview/p-1_infoview, neither can we" sin <[EMAIL PROTECTED]> wrote: cisco4ng wrote: > I already know how to do that. I read that before asking the forum. > > So what is the solution? If you can't read it it doesn'

Re: [FW-1] Difficult VPN Setup

2008-02-07 Thread Hugo van der Kooij
> -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Markus Schmidt <[EMAIL PROTECTED]> wrote: >> >> SO my Question: Can I somehow get it to work that my Firewall accepts >> non VPN Traffic to NET_C, WHILE LEAVING NET_C in the encryption Domain? >> (For my German Partners?) >> I CAN NOT change the

Re: [FW-1] Difficult VPN Setup

2008-02-07 Thread David DeSimone
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Markus Schmidt <[EMAIL PROTECTED]> wrote: > > SO my Question: Can I somehow get it to work that my Firewall accepts > non VPN Traffic to NET_C, WHILE LEAVING NET_C in the encryption Domain? > (For my German Partners?) > I CAN NOT change the configurati

[FW-1] Difficult VPN Setup

2008-02-07 Thread Markus Schmidt
Hello, I'm the Administrator at Berlin. Behind my R65 FW are two Networks as encryption Domain, a internet public (routable) class C network (NET_C) and a private (172.x) class B Network (NET_B). In the past, only the public NET_C was used, and is defined as the encryption Domain of a "FW_Berlin"

Re: [FW-1] Urgent: checkpoint cpinfo assistance needed.

2008-02-07 Thread sin
cisco4ng wrote: I already know how to do that. I read that before asking the forum. So what is the solution? If you can't read it it doesn't mean CP TAC can't read it. Send them the resulting file along with what the console output says and then wait for them to answer. also, make sure t