Firewall-1

Re: [FW-1] VPN Edge SMART management setup

Subject: Re: [FW-1] VPN Edge SMART management setup
From: Stuart Brameld <Stuart.Brameld AT NEBULASSECURITY DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 23 Nov 2005 11:03:18 -0000
I haven't done this on R60 yet, but assuming it's the same as R55 there
are a couple of bits to check:

Firsly, ensure the SMS service is started. If management server is
Windows/Solaris type "smsstart" at a command prompt. Need to be in
expert mode if SPLAT.

Also, check out SK30202 on the Check Point site. If your management
server is behind NAT, you need to go into the
%FWDIR%\conf\sofaware\SWManagementServer.ini file and in the "Server"
section, add your management servers external IP as follows:
ExternalIP=<machine_public_ip>
You'll need to do a cprestart afterwards

Lastly, you should be able to access the VPN-1 Edge/Embedded Portal and
check connectivity in there - https://<managementserverip>:981 - I think
that's the right port.

Cheers

Stu


-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Andriy
Malyuk
Sent: 23 November 2005 10:18
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] VPN Edge SMART management setup

Hi Gurus,
I have difficulty trying to link Edge to Smart Centre. The error message

is "The Service Center did not respond".
I'm using XU with 5.0.92 image and R60 Express. According to 
documentation the communication between  Sofaware embedded appliance, 
like Edge,  and Service Centre, SC Express in my case, uses UDP ports 
9281/9282. I can see the Edge trying to connect to 9282/udp port, but 
the point is that I can't see Smart Centre listening on those ports.
I created Edge object in Smart Dashboard, and defined rules accepting 
connections on UDP ports 9281/9282.
Perhaps  I  missed  something. Do I need to to configure something else?


Thanks,
Andrey.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>