Firewall-1

[FW-1] Cisco-MARS + NGX (R60) configuration

Subject: [FW-1] Cisco-MARS + NGX (R60) configuration
From: Erik Decker <edecker AT NORMAL DOT ORG>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 26 Sep 2005 12:03:04 -0500
I am setting up a Cisco MARS device
(http://www.cisco.com/en/US/products/ps6241/index.html) to do some log
consolidation and analysis.  This product works with cisco devices and
other supported software applications (ie:  Checkpoint).  When following
the instructions for setting up the Checkpoint Object (setting
username/password, creating host object that can manage the checkpoint
fw, creating a client sic, addting access word, adding server sic to
cs-mars appliance) I am left with the following error when I run the
discover:

"There is No Error Log for this Device"

Running NGX on SPLAT.  Management and Enforcement Module are on the same
box.

Has anyone used these two products together?  I get no errors in the
SmartTracker about dropped packets (I've set the rulebase up so it will
accept LEA, CMPI commands from cs-mars).  The key is initalized and
trusted on Checkpoint.  It gets valided when I run the Discover from
cs-mars.  

It looks to me as if it's telling me that there is no log file on the
checkpoint firewall.  Does anyone know how I can check this? 

Erik Decker
Network Administrator
Town of Normal
(309) 454-9515

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>
  • [FW-1] Cisco-MARS + NGX (R60) configuration, Erik Decker <=