CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point SecurePlatform (SPLAT)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-03-14
Senior Member
 
Join Date: 2007-05-25
Posts: 124
Rep Power: 2
pat13b has an average reputation (10+)
Default Visualization Tool NGX Help

Hello,

Can someone set me straight on this tool. I am under the impression that this tool gets loaded and extracted on my SPLAT management server. (we have SPLAT managing Nokia Appliances)....
Then some commands are run on the SPLAT box that creates a HTML file.

This file then can be read by anyone using a browser.

The problem is when I run the command, it says command not found.

I think I'm missing a major step here.

I cannot seem to find anything that walks you through this. I have found the release notes, but still stuck.

Please help.
thanks

-pat13b
Reply With Quote
  #2 (permalink)  
Old 2008-03-15
Senior Member
 
Join Date: 2007-05-25
Posts: 124
Rep Power: 2
pat13b has an average reputation (10+)
Default Re: Visualization Tool NGX Help

allot of views....no replies....I guess this is not a popular tool ???

I can see why, if it's this much of a pain in the ass to implement.

-pat13b
Reply With Quote
  #3 (permalink)  
Old 2008-03-15
Senior Member
 
Join Date: 2006-09-26
Posts: 804
Rep Power: 3
cciesec2006 has an average reputation (10+)
Default Re: Visualization Tool NGX Help

What is not working? See below:

[Expert@smc-NGx visual]# fw ver
This is Check Point VPN-1(TM) & FireWall-1(R) NGX (R65) HFA_02, Hotfix 602 - Build 006
[expert@smc-NGx visual]#


[Expert@smc-NGx visual]# /usr/local/visual/cpdb2html.csh /usr/local/visual /var/www/html 172.25.2.254 admin 123456 -o cpug.html

Connected to SmartCenter Server version 6.2.0, Visualization with default XSL files might be incorrect.

Querying tables...


Processing table Communities ...Finished
Processing table FireWall Policies ...Finished
Processing table Network Objects ...Finished
Processing table Services ...Finished
Processing table Users ...Finished

[Expert@smc-NGx visual]#

CCIE Security
Reply With Quote
  #4 (permalink)  
Old 2008-03-15
Senior Member
 
Join Date: 2007-05-25
Posts: 124
Rep Power: 2
pat13b has an average reputation (10+)
Default Re: Visualization Tool NGX Help

Thanks cciesec2006 !!!!!

ok, I got that to work. It was something stupid I was doing...
(I forgot the slash)

now, is it recommended that this HTML file be FTP to another server for veiwing ? or can this be veiwed from the SPLAT server ?

Also, do you know what the Advanced format would be used for?
"cpdb2web"

thanks again
-pat13b
Reply With Quote
  #5 (permalink)  
Old 2008-03-15
Senior Member
 
Join Date: 2006-09-26
Posts: 804
Rep Power: 3
cciesec2006 has an average reputation (10+)
Default Re: Visualization Tool NGX Help

"Also, do you know what the Advanced format would be used for?"

I've not had a chance to try that yet.

"now, is it recommended that this HTML file be FTP to another server for veiwing ? or can this be veiwed from the SPLAT server ?"

It can not be done on the SPLAT server itself, even though there is a way
to get it to work. The recommended is to copy, either via scp, sftp or ftp,
over to another box running either apache or Microsoft IIS so that you can
view the html file.
Reply With Quote
  #6 (permalink)  
Old 2008-03-15
Senior Member
 
Join Date: 2007-05-25
Posts: 124
Rep Power: 2
pat13b has an average reputation (10+)
Default Re: Visualization Tool NGX Help

thanks again for all the help.

-pat13b
Reply With Quote
  #7 (permalink)  
Old 2008-03-17
Member
 
Join Date: 2006-11-16
Location: Tallinn, Estonia
Posts: 82
Rep Power: 3
Reaper has an average reputation (10+)
Send a message via Skype™ to Reaper
Default Re: Visualization Tool NGX Help

I am running Visualization Tool from Windows box where I run SmartDashBoard to connect to management server. That way I don't have to mess with management server, its easier and safer (I think).
__________________
CCNA certified
Reply With Quote
  #8 (permalink)  
Old 2008-03-17
Senior Member
 
Join Date: 2007-05-25
Posts: 124
Rep Power: 2
pat13b has an average reputation (10+)
Default Re: Visualization Tool NGX Help

Thanks very much Reaper.

So I think I am looking at this wrong? Should I load up the windows version of the visualization tool on a windows server and point it to my management server. My management server is SPLAT.
I have been using the SPLAT version loaded on the my SPLAT server.

Also, are you using the the advanced format that uses "cpdb2web"
This places things in an XML format, whicjh I cannot figure out how to read... But I do know that with this method, I am able to get all the policies as opposed to the simplified format that only gets me one policy.

thanks
-pat13b
Reply With Quote
  #9 (permalink)  
Old 2008-03-18
Senior Member
 
Join Date: 2007-05-25
Posts: 124
Rep Power: 2
pat13b has an average reputation (10+)
Default Re: Visualization Tool NGX Help (UPDATE)

Ok,

Here is what I have figured out.

1. The simplified version is no good if you run multiple policies.
2. The advanced version needs files in specific locations!!! They do not
stress this in the release notes, but mention it. It was an over site on
my part.
Don't waste time with IE (at least ver6.0) it will not display the xml files
correctly. I downloaded firefox and bingo!! I see all my policies !!!
This could have been mentioned in the release notes.

I think I will use cciesec2006's advice and do the run on the SPLAT box then ship the files off to another machine for veiwing.

I do notice a differents in the veiw from the SPLAT version and Windows version. The Windows version has a very nice header and veiws a little better than the SPLAT version, but either way it should keep the auditors happy.

-pat13b
Reply With Quote
  #10 (permalink)  
Old 2008-03-18
Senior Member
 
Join Date: 2007-05-25
Posts: 124
Rep Power: 2
pat13b has an average reputation (10+)
Default Re: Visualization Tool NGX Help

scratch the looks different part. I did not move the icons directory. once I did this, it now looks the same as the windows version.

very cool.

-pat13b
Reply With Quote
  #11 (permalink)  
Old 2008-03-26
Member
 
Join Date: 2006-11-16
Location: Tallinn, Estonia
Posts: 82
Rep Power: 3
Reaper has an average reputation (10+)
Send a message via Skype™ to Reaper
Default Re: Visualization Tool NGX Help

I have not tried the XML version. Instead I run cpdb2html.bat that creates html files.
__________________
CCNA certified
Reply With Quote
  #12 (permalink)  
Old 2008-04-17
Junior Member
 
Join Date: 2007-11-27
Posts: 1
Rep Power: 0
mbassett has an average reputation (10+)
Default Re: Visualization Tool NGX Help

You can get each policy you want by using the -m cluster/machinename with the simplified version. I batch mine out with a simple script that takes username and password at the commandline and spits out all of my policies. The xml versions aren't as helpful for dumping into word documents for my compliance reviews.
Reply With Quote
  #13 (permalink)  
Old 2008-08-19
Member
 
Join Date: 2006-05-23
Location: New Zealand
Posts: 56
Rep Power: 3
walcat_0 has an average reputation (10+)
Default Re: Visualization Tool NGX Help

Hi,

I have a problem with this tool i am running from my machine which i run my Smart Console access from i am using the format

cpdb2html.bat . d:\temp <management server> <admin> <passwd> -o <enforcement point>.html - m <enforcement point>

Now this works in thta it generates an html file for no problems there, but what it doesnt see to do is put any of the icons into the html file (im am assuming its supposed to ?)

Any ideas please ?

Thanks
Walcat
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 08:13.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0