Re: SNMP monitoring of Firewall-1

[Bill Painter <william.t.painter@lmco.com>]

The more I think about this problem the more I like the idea of sending
my log files, rejects and such to another machine that is running with
Tivoli and a log file adapter.

Does anyone have a comment on this approach?  It removes the "agents"
and protocols from the firewall and does a push.

Thanks,
Bill Painter
Unix Admin.
William.t.painter@lmco.com

"Smith, Kristi" wrote:

>
>
> We will be doing this within the next 3 months so I'm interested in
> any feedback as well.
>
> Kristi Smith
> Mentor Graphics Corporation
> (503) 685-1971
> kristi_smith@mentorg.com
>
> -----Original Message-----
> From: Chance, Larry [mailto:lchance@sfbcic.com]
> Sent: Thursday, April 13, 2000 12:51 PM
> To: 'NetviewListSERVERUsers nv-l@tkg.com'
> Subject: [NV-L] SNMP monitoring of Firewall-1
>
> I asked this on Firewall-1's list-server and no one responded, so I'll
> try
> here.
>
> Anyone monitoring their FW-1 (Checkpoint/Firewall-1) with Netview or
> an
> SNMP/NMS?
> And are you having any success?
>
> Also, what are the security risks involved, especially with SNMP v1 on
> the
> firewall server?
>
> In an NT DMZ configuration, can you 'bind' the SNMP services to either
> NIC?
>
> Thanks for the thoughts and opinions you might share.
>
> Larry
>
>
> _
> _______________________________________________________________________
>
> NV-L List information (unsubscribing, policies, posting, digest
> version,
> searchable archives): http://www.tkg.com/nv-l

The more I think about this problem the more I like the idea of sending
my log files, rejects and such to another machine that is running with
Tivoli and a log file adapter.

Does anyone have a comment on this approach?  It removes the "agents" and protocols from the firewall and does a push.

Thanks,
Bill Painter
Unix Admin.
William.t.painter@lmco.com

"Smith, Kristi" wrote:

 

We will be doing this within the next 3 months so I'm interested in any feedback as well.

Kristi Smith
Mentor Graphics Corporation
(503) 685-1971
kristi_smith@mentorg.com

-----Original Message-----
From: Chance, Larry [mailto:lchance@sfbcic.com]
Sent: Thursday, April 13, 2000 12:51 PM
To: 'NetviewListSERVERUsers nv-l@tkg.com'
Subject: [NV-L] SNMP monitoring of Firewall-1

I asked this on Firewall-1's list-server and no one responded, so I'll try
here.

Anyone monitoring their FW-1 (Checkpoint/Firewall-1) with Netview or an
SNMP/NMS?
And are you having any success?

Also, what are the security risks involved, especially with SNMP v1 on the
firewall server?

In an NT DMZ configuration, can you 'bind' the SNMP services to either NIC?

Thanks for the thoughts and opinions you might share.

Larry
 

_________________________________________________________________________

NV-L List information (unsubscribing, policies, posting, digest version,
searchable archives): http://www.tkg.com/nv-l