Re: [fw1-gurus] fwm logexport - does it work against MDS in NGX-R65?

["Hal Jackson" <hal_jackson@xxxxxxxxxxx>]

Here is the fix for logexport, from Check Point:

CPRegSvr /opt/CPPIconnectra-R65/lib/libCPInstMgrConnectraConvComps.so

This sets a registry entry to allows "fwm logexport" to work on the MDS 
audit file.
(it may fix the issue running it on the gateway; didn't try that)

Thought this might prove useful since others have run into this.

----- Original Message ----- 
From: "Hal Jackson" <hal_jackson@xxxxxxxxxxx>
To: "Malguy, Vincent" <Vincent.Malguy@xxxxxxxx>; "Robert Hughes" 
<rob@xxxxxxxxxxxxx>; "FW1 Gurus" <fw1-gurus@xxxxxxxxxxxxxxxxxx>
Sent: Monday, February 09, 2009 8:11 PM
Subject: Re: [fw1-gurus] fwm logexport - does it work against MDS in 
NGX-R65?


Yes, that is what I did. I talked to CP today about it, this bug is
reproducible by them and going to R&D. Hope we see a fix soon.

----- Original Message ----- 
From: "Malguy, Vincent" <Vincent.Malguy@xxxxxxxx>
To: "Hal Jackson" <hal_jackson@xxxxxxxxxxx>; "Robert Hughes"
<rob@xxxxxxxxxxxxx>; "FW1 Gurus" <fw1-gurus@xxxxxxxxxxxxxxxxxx>
Sent: Monday, February 09, 2009 11:12 AM
Subject: RE: [fw1-gurus] fwm logexport - does it work against MDS in
NGX-R65?


I had the same problem after the same upgrade.

I upgraded my script from  :
/opt/CPmds-R65/bin/fwm logexport -n -i
/var/opt/CPmds-R65/customers/$CMA-NAME/CPsuite-R65/fw1/log/$file >>
$CMA-NAME.$DATE.log
to
mdsenv  $CMA-NAME
/opt/CPmds-R65/bin/fwm logexport -n -i
/var/opt/CPmds-R65/customers/$CMA-NAME/CPsuite-R65/fw1/log/$file >>
$CMA-NAME.$DATE.log

So I think you shoud try to "mdsenv " to your cma prior running fwm
logexport

Vincent.

-----Original Message-----
From: fw1-gurus-bounces@xxxxxxxxxxxxxxxxxx
[mailto:fw1-gurus-bounces@xxxxxxxxxxxxxxxxxx] On Behalf Of Hal Jackson
Sent: dimanche 8 février 2009 04:52
To: Robert Hughes; FW1 Gurus
Subject: Re: [fw1-gurus] fwm logexport - does it work against MDS in
NGX-R65?


This is on the P-1 server, not the gateways. The P-1 server was upgraded
from NGX-R62 no HFA to NGX-R65.

I did a search on sk36423 and didn't find anything but I saw some others
fixed the issue that way. We usually just export on the management, not the
gateways, and we are only having problems exporting the MDS's logs (CMA logs
work)

Someone in the "community" section of the CP support site suggests there
might be an issue with a file lock, but that doesn't explain why mdsenv to
another CMA allows the command to work - mdsenv is mainly changing env
variables.
----- Original Message ----- 
From: Robert Hughes
To: Hal Jackson ; FW1 Gurus
Sent: Saturday, February 07, 2009 10:35 PM
Subject: Re: [fw1-gurus] fwm logexport - does it work against MDS in
NGX-R65?


Should work. Were the firewalls upgraded? If so, you might want to open a
ticket and mention sk36423.

-----Original Message-----
From: Hal Jackson [mailto:hal_jackson@xxxxxxxxxxx]
Sent: Saturday, February 7, 2009 03:22 PM
To: 'FW1 Gurus'
Subject: [fw1-gurus] fwm logexport - does it work against MDS in NGX-R65?

Using Provider01.
We use fwm logexport to generate reports.
Can't get it work under NGX-R65, base version or with any hotfix including
up to HFA 40.

Get the message "failed to convert database".


*************************************************************************************
The message is intended for the named addressee only and may not be
disclosed to or used by anyone else, nor may it be copied in any way.

The contents of this message and its attachments are confidential and may
also be subject to legal privilege.  If you are not the named addressee
and/or have received this message in error, please advise us by e-mailing
security@xxxxxxxx and delete the message and any attachments without
retaining any copies.

Internet communications are not secure and COLT does not accept
responsibility for this message, its contents nor responsibility for any
viruses.

No contracts can be created or varied on behalf of COLT Telecommunications,
its subsidiaries or affiliates ("COLT") and any other party by email
Communications unless expressly agreed in writing with such other party.

Please note that incoming emails will be automatically scanned to eliminate
potential viruses and unsolicited promotional emails. For more information
refer to www.colt.net or contact us on +44(0)20 7390 3900.


_______________________________________________
fw1-gurus mailing list
fw1-gurus@xxxxxxxxxxxxxxxxxx
http://lists.phoneboy.com/listinfo.cgi/fw1-gurus-phoneboy.com

_______________________________________________
fw1-gurus mailing list
fw1-gurus@xxxxxxxxxxxxxxxxxx
http://lists.phoneboy.com/listinfo.cgi/fw1-gurus-phoneboy.com