View Single Post
  #1 (permalink)  
Old 2008-02-25
kausik kausik is offline
Junior Member
 
Join Date: 2008-02-24
Posts: 6
Rep Power: 0
kausik has an average reputation (10+)
Default How to establish SIC betwn mgmt cntr and enforcement module WITHOUT SMART DASHBOARD

Hi
I am using a CPMI client(running on a linux pc) to access the checkpoint object database at the management center. I have a physically connected module (R65 installed)to this management center. Now after login to this management center thru my cpmi client, I am able to add a network object as gateway_ckp with ipaddress that corresponds to that physically existing module. I could install Firewall and enable VPN on this newly created object. But when I am trying to update this object SIC is not getting established as I am not able to find to give the activation key that we usually give while configuring through SmartDashboard. Thus the communication state is showing initialized(ideally it should be communicating if SIC got established) and the trust state is showing not established (ideally it should be established if everything goes fine).

Note: I am not allowed to use the Smart Dashboard and everything I want to do through CPMI

My guess is to create a CPMI OPSEC application object for the (linux)host running CPMI client. Establish a SIC between this OPSEC application host and the module. But I am not sure the right steps out of those thousand option in checkpoints management interface.

Please let me know if anybody has got any inputs regarding this.
Thanks
kausik
Reply With Quote