CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Internal Security > Endpoint Security (Formerly Integrity)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-10-21
diago diago is offline
Junior Member
 
Join Date: 2006-11-05
Posts: 24
Rep Power: 0
diago has an average reputation (10+)
Default Integrity client Author = masteradmin ???

Does anyone know how to remove or hide the author field in the Integrity client. By default it shows up as masteradmin and displays this to clients, which is absolutely insane. A collegue suggested creating an account, create and deploy the policy, then delete the account you used. Does any one else have any suggestions?
Reply With Quote
  #2 (permalink)  
Old 2007-11-01
CSING CSING is offline
Member
 
Join Date: 2007-06-22
Posts: 99
Rep Power: 2
CSING has an average reputation (10+)
Default Re: Integrity client Author = masteradmin ???

Deploy the Integrity agent package with system Tray icon unchecked. Then you will be super stealthy.
Reply With Quote
  #3 (permalink)  
Old 2007-11-14
unclerichard unclerichard is offline
Junior Member
 
Join Date: 2007-05-11
Location: Bristol, UK
Posts: 19
Rep Power: 0
unclerichard has an average reputation (10+)
Default Re: Integrity client Author = masteradmin ???

<grin>.... That is just too cruel. If this is disabled though, is there a registry key or environment variable that stores the currently active policy? We have had a few instances where, despite the last connect date/time being updated on the server, the disconnected policy was still active !!

Speaking of which, I am looking forward to the beaconing system that is mooted for version 7.

Unc
Reply With Quote
  #4 (permalink)  
Old 2007-11-14
CSING CSING is offline
Member
 
Join Date: 2007-06-22
Posts: 99
Rep Power: 2
CSING has an average reputation (10+)
Default Re: Integrity client Author = masteradmin ???

The policy is not saved in the registry or an environment variable. The downloaded policy is stored in the Internet logs directory and then saved in the appropriately named rdb datastore. So the best way to determine the policy would be the server reports.

Regarding the issue you mentioned: I understand that you mean that the Reports indicate a different active policy than the endpoint. Specifically Reports indicate a corperate policy and the endpoint in reality is Disconnected. It is good to remember that Reporting data is not Real-time. Data for Reporting about endpoints is not sent with syncs or heartbeats. It is sent by loguploads. Depending on your logupload setting your Report data will be skewed. Also when a endpoint is disconnected from the Server data cannot be uploaded to the server.
Reply With Quote
  #5 (permalink)  
Old 2007-11-28
unclerichard unclerichard is offline
Junior Member
 
Join Date: 2007-05-11
Location: Bristol, UK
Posts: 19
Rep Power: 0
unclerichard has an average reputation (10+)
Default Re: Integrity client Author = masteradmin ???

We had another of these today but the common factor has been the client version of 6.5.063.166. Despite the client being visible in the endpoints monitor on the server and with the date incrementing, the client and the server were in agreement that the disconnected policy was active. Fortunately, our d/c policy allowed a client upgrade to v199. With the new 'reset' feature, we should be able to brief our field support to do this. (nice one CP).

Unc
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 02:26.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0