I need run two programs in one platform. Together they conflict. I think create another one copy of system files like (/usr /var /opt ...). I find that this possible do with chroot, but man is too small for understend how use it. May be someone give link where I can find example with this...
I need auto install script for Check Point AI R55.
We start create script, but one problem stop us - how pass Random Key Hit Session.
Does anyone know how do it on Solaris ?
I dont understand what modules need to install for license:
cpfw-fss-1-ng cpmp-mpu-1-ng
how all this was work?
Where I must install this license (what module)?
You need to backup
$FWDIR/conf/objects_5_0.C (on SmartCenter Server)
$FWDIR/conf/*.W
$FWDIR/conf/rulebases.fws
$FWDIR/database/fwauth.NDB*
use utilites
upgrade_export
upgrade_import
You must install CP on new server, then use upgrade_export put backup files on the same catalog.
About licanse I...
I have a problem. Old log was create by R55. Now I up R55W. With new log (R55W) SmartView Reporter work (generate reports), but with old log files (from R55), it start generate (create catalog for report) and down. In history just write Failed.
How can I generate reports from old logs with new...
Its not good install SmartCenter Server and Enforecment module on the same server.
Good choise install Enforecment point on solaris and SmartCenter Server with SmartConsole on Windows.
When I do cluster I use document on Checkpoint.com . All what you need it the same configuration of your modules and up synhronization with ClusterXL.
Install you enforecment points, create sic and then in SmartDashboard create Cluster object add your enforecment point on it. In cluster...
I create connection but what was wrong I dont understand. I again create certificate and sic connection - nothing. I look on port fw1_ufp - all correct, in websense too. Then I change port number in Check Point and in Websense, install policy - nothing. Change back - in Check Point and Websense...
I have R55 and download Websense 5.1
Websense install on the test workstation and Management module install on my workstation.
I create sic communication between UFP server-Websense and CP in line Trust State - Trust establish.
Then I go to tab UFP Options and click on the button Get...
I compare my ISAKMP log and log in the example and find that
in my log in all attemts I have:
ISAKMP: encryption AES-CBC
but in config for isakmp I do:
vpngroup cert address-pool 12
isakmp policy 20 authen rsa-sig
isakmp policy 20 encrypt des
isakmp policy 20 hash md5...
Yes, I create certificate with Certificate manager, and enroll him on CA server.
After I import certificate in to VPN client. Certificate has fooloving attributes: pix(cisco).
Did you get a certificate for the pix itself from the CA server?
Yes I issue certificat on CA when he appear there.
I use PDM and in tab VPN-certificate-enrollement.
I enter password and check PIX serial number and ip address.
After that I push button Enroll PIX with the CA.
In console I on...
I create connection between PIX 515 and VPN client v-3.6
VPN client is very easy in use, but may be you help this:
http://www.cisco.com/en/US/products/sw/secursw/ps2308/index.html
Yes you was right :). I install mscep.dll and receve certificate on PIX. But now I cant create connection between VPN client 3.6 and PIX using certificates. In Log on VPN client I have message:
11:57:02.264 08/04/03 Sev=Warning/3 DIALER/0xE3300008
GI VPNStart callback failed...
I do as you say and:
ca auth abcd deb5647b 3bf68599 6436ecc1 3de08564
CIERR: The number of parameters is wrong!
I try use:
ca auth deb5647b 3bf68599 6436ecc1 3de08564
CIERR: The number of parameters is wrong!
and:
ca auth deb5647b3bf685996436ecc13de08564
CIERR: CA Identity --<ca_nickname>-- is...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.