A few questions

[Check]

Good day boys and girs,

Need some help, I remember seeying a question about which user settings are stored locally on the user template if an ldap schema is not updated to the ldap server.

I have found "Authentication, Location, Time, Encryption" I think the questions was looking for 3 answers. I'm not sure which 3 are correct.

I've been trying to find anything in the syngress book, Checkpoint handbook and the pdf's about this with no luck.

Thanks!

[Check]

Oh yeah, also had another question.

To export logs that are almost full, do you just need to use fw export? I also read something about cyclical logging that removes old logs when disk space is low.

Any help would be appreciated.

[northlandboy]

I can't help with your LDAP question, but I can maybe add some input to your logging question.

fw logexport can be used to convert Check Point-format logs into text files. It doesn't remove old log files though - they still stay there. The logs themselves are not "full" - it's the disk space. If you run a logexport with low disk space, you're certainly going to run out of space, since an exported log file is bigger than the Check Point format one.

You can configure options within Smart Dashboard, on the gateway or managment object, as appropriate, under the Logs and Masters section, to automatically delete logs, or stop logging, if disk space gets to certain thresholds.

Personally I wouldn't bother exporting logs, unless you have a requirement to put them into text, perhaps for reading with something else. Better to set up log rotation scripts, then archive them after a bit. Note that compressing them reduces them to about 10% of their size. Some people do like to put them in text for archival purposes, so that they can be read in future, without requiring special software. This depends on your site policy.