Synchronizing Management Consoles

[roadrunner]

Synchronizing Management Consoles
(Relevant to FireWall-1 4.1 and earlier) as NG has its own build in Synchronization tool ... available at an additional fee.

FireWall-1 4.1 and earlier have a built-in way to "execute" a command when a policy is loaded from the command line. Edit $FWDIR/lib/setup.C, add the bolded two lines:


( :setup_version (300)
:load_program (path-to-command-to-run)
:dbload_program (path-to-command-to-run)
The first command (load_program) is executed on a policy install. The second command (dbload_program) is executed when the user database is loaded. Basically, you would write a script that would copy over the contents of $FWDIR/conf and $FWDIR/state in this script/program, which can invoke "anything." A good example of how to do this is the document "Setting up a Redundant Management Console on Windows NT" written by Andy Kendall. redundant-mc-nt.pdf (23.8 K) (requires a PDF viewer).

For guidelines on editing setup.C, refer to Editing Objects Dot C




-- GuyR - 11 Jan 2004


FAQForm
FAQs.Class: RemoteManagementFAQs
FAQs.OS:
FAQs.Version: