CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Miscellaneous
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-02-15
Junior Member
 
Join Date: 2006-02-15
Posts: 3
Rep Power: 0
reapur has an average reputation (10+)
Default New user saying Hi plus a question.

Hello,
Glad I found this forum. So far the FAQ's are excellent.
One thing I didn't see was the problem I'm having.

We run NG/AI. We have 2 Nokia's one in the US and one in Germany. The Console is on a machine in Germany. All windows based.

Today I had a problem where my counterpart in Germany stayed logged in to the SmartDashboard and went to bed! so I couldn't make any changes on my FW. I searched and looked around but couldn't find a way to deal with this other than leave him a voicemail to log out when he woke up.

Are there any tricks that I am missing?

Thanks and best regards
Reply With Quote
  #2 (permalink)  
Old 2006-02-15
Senior Member
 
Join Date: 2006-02-09
Location: Charleston, SC
Posts: 291
Rep Power: 3
lammbo has an average reputation (10+)
Default Re: New user saying Hi plus a question.

If you have remote access to the management server (sounds like you do), you can always run cprestart. As long as it's just a management server and not an enforcement point, the only risk you run is if your counterpart made changes and didn't save them. Of course, you can use the audit log to see if he made any changes, but it will not tell you if he saved them.
__________________
There's no place like 127.0.0.1
Reply With Quote
  #3 (permalink)  
Old 2006-02-16
Senior Member
 
Join Date: 2005-08-22
Location: Ottawa, Canada
Posts: 347
Rep Power: 4
Lackie has an average reputation (10+)
Default Re: New user saying Hi plus a question.

It's not recommended but you could remove the $FWDIR/tmp/manage.lock file. This will allow you to log in but the other user will also be logged in with read/write access.

Same warning as well... If the other user has made changes but not saved then they will be lost.
Reply With Quote
  #4 (permalink)  
Old 2006-02-16
Junior Member
 
Join Date: 2006-02-15
Posts: 3
Rep Power: 0
reapur has an average reputation (10+)
Default Re: New user saying Hi plus a question.

Thanks guys.
I wish there was a way to send a user (especially admins) a message while your in smartdashboard. So you login as read only while someone else is there and have a conversation...


Cheers
Reply With Quote
  #5 (permalink)  
Old 2006-02-17
Junior Member
 
Join Date: 2006-02-17
Posts: 5
Rep Power: 0
greg06 has an average reputation (10+)
Default Re: New user saying Hi plus a question.

For me, the best and simpler way to do it is using the Smartview Status.
Select the Console on the system status window, select management and click on /tools/disconnect client.
You will then see all opened GUI, who is connected and if he lock the database.
You must have "read/write all" right to do so.

But... there is no way to send message using the smartview status.

Cheers.
Reply With Quote
  #6 (permalink)  
Old 2006-02-21
Junior Member
 
Join Date: 2006-02-15
Posts: 3
Rep Power: 0
reapur has an average reputation (10+)
Default Re: New user saying Hi plus a question.

Greg, I just got around to testing your tip, works great. I like the fact that we can tell if the database is locked. If not locked, there is probably nothing to lose by disconnecting him :)

Cheers
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 12:04.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0