CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Eventia Analyzer/Reporter/SmartView Reporter
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-08-17
drp3483 drp3483 is offline
Junior Member
 
Join Date: 2006-08-17
Posts: 2
Rep Power: 0
drp3483 has an average reputation (10+)
Default Switching from standalone to distributed installation (Eventia)

Currently the mgmt server (Win2k3 SP1 with NGX R60 hfa 02) houses the logs & is used for Eventia report generation. EM is Nokia Ipso 3.9 Wd like to keep the existing mgmt server as log server & just move the Eventia role to a new server.

1.Export existing Eventia Database by performing a rmdstop. Backup Database via GUI (connections.tbl)

2. Install Eventia Reporter on new Eventia server. Establish pre-shared key. Import Database.

3. Uninstall Eventia Report from SmartCenter server. Deselect Reporter option in General Property of the existing Smartcenter server. Install Eventia Reporter Add-On.

4. Create new Eventia Server as Checkpoint host object in Dashboard, establish SIC with the Eventia server with the pre-shared key created during installation. Push policy for Reporter to become functional.

5. Start log consolidation on Eventia server. Test by generating reports.

Here are my concerns & questions:
1. how does exporting the db via GUI (to a connections.tbl) & running an import on the new server differ from copying the entire database directory to the new server?
2. Does the export of the db contain custom reports that were previously configured on the Smartcenter server? If not, is there a way of backing it up without having to reconfigure all custom report templates.
3. Where is the Eventia Reporter add-on? I’ve tried the setups several times and the only options for add-ons are for Smartportal & User authority. Ckpt support says its not necessry to uninstall Evt reporter from the mgmt server & that by re-running Evt reporter installation will install the add-on...well, I tried it in the lab and didn't work.
4. We have created a separate partition on the new server for temp files & another for report outputs. It doesn’t look like during installation it asks to define the temp file directory. Am I correct in thinking that this will have to be done by modifying the my.ini file?
5. License for Eventia, as I understand it, is tied to the smartcenter & the EM’s we have. Technically I shdn’t have to detach/attach license to the new Eventia Server, correct?

Thanks in advance for your input,
Reply With Quote
  #2 (permalink)  
Old 2006-08-21
kva.kva kva.kva is offline
Senior Member
 
Join Date: 2006-01-26
Location: Moscow, Russia
Posts: 706
Rep Power: 3
kva.kva has an average reputation (10+)
Default Re: Switching from standalone to distributed installation (Eventia)

1) From documentation
"Export a Database Table to a Remote Machine
Exporting a table to a remote machine from a Windows platform requires the
correct permissions to perform the action. In order to set the permissions, perform the following steps:
1. Open the "Eventia Reporter Server service by going to the Window's Start Menu > Settings > Control Panel and the select Administrative Tools >Services.
2. Double click the Eventia Reporter Server entry.
3. Select the Log On tab and set user permissions to an appropriate account that has access to the network drive."

3) If you use Windows try to install from windows\CPrt directory. For SPLAT run "rpm -i CPrt_unify-R60-00.i386.rpm" (for NGX) and then run cpconfig

4) Yes, you are right. See part "Modifying Eventia Reporter Database Configuration" in Eventia doc.

5) You are right again. Add license to SmartCenter. That's all.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 20:00.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0