Re: [FW1] Enterprise center

[Gavin_Adams@ey.bm]

If he bought a FIG-100, management is bundled with the inspection module.
Remotely, he could use the GUI client to connect, and manage, the remote
firewall. However, the policies would not be tied together, nor would
logging.

If it is just an inspection module (FM-100???), it will log back to the
system running the unlimited management module. In the event connectivity
is lost, the FM-100 would log locally. I did some tests with this, and it
worked ok. There wasn't enough time to complete extended testing to see if
the FM-U (what I was testing) would reconnect and log back to the
management station. Cron jobs and scripts were used to consolidate log
files back to the MGMT station for reporting and audit purposes.

As for setting rules, you need a connection between the two. However, loss
of connectivity doesn't bring down the FM-100. Never did test to see if it
loads the previous policy is the daemon is stopped and restarted.

YMMV,

--- Gavin

Ernst & Young
eSecurity Services





Michael Nemeth <mnemeth@cnc.sk> on 29/04/99 07:16:03

To:   fw-1-mailinglist@lists.us.checkpoint.com
cc:    (bcc: Gavin Adams/CONSUL/ErnstYoung/BM)
Subject:  [FW1] Enterprise center





Hello

Our customer has bought Enterprise center and for his other branch has
bought Firewall module 100. This offices are connected through Internet
line. How he will manage that Firewall Module on his branch when line will
go down? Is there any possibility to install Management server for ofline
setting rules on Firewall module? Or better question.
If I have Firewall module and Enterprise center. Am I able to set rules on
Firewall module without direct connection between this two machines?

                                                   Thank you
                                                   Michael Nemeth



===========================================================================
=====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
===========================================================================
=====






================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================