DM
Коллеги, подскажите, в SmartConsole есть доступ в коммандную строку MGM, с него возможно зайти в EXPERT?
Size: a a a
2020 February 13
B
Коллеги, подскажите, в SmartConsole есть доступ в коммандную строку MGM, с него возможно зайти в EXPERT?
нельзя
OK
Коллеги, подскажите, в SmartConsole есть доступ в коммандную строку MGM, с него возможно зайти в EXPERT?
Это для api
OK
Через вебку можно
DM
нельзя
😢. возможно от туда можно пофиксить доступ на MGM
DM
Через вебку можно
вебка ssh сломались
A
вебка ssh сломались
Cprid от имени sms
B
a console шнурок? ilo какое-нибудь на сервере, не вариант?
DM
a console шнурок? ilo какое-нибудь на сервере, не вариант?
в облаке
B
если это виртуальные ресурсы, то есть доступ через интрефейс гипервизора/оркестратора
Д
Коллеги, здравствуйте. Есть ли у management сервера cli.sh команда для сброса sic удаленного шлюза и его подключения?
Д
sic на шлюзе сбросили.
OK
OK
вернее, это на шлюзе...
OK
а на менеджменте через консоль просто задаете
Д
через cpconfig?
да, через cpconfig быс сброшен sic на шлюзе. меня больше интересует есть ли команда на management которая бы заменила его сброс и добавление, аналогично как делаем на smart console.
OK
да, через cpconfig быс сброшен sic на шлюзе. меня больше интересует есть ли команда на management которая бы заменила его сброс и добавление, аналогично как делаем на smart console.
теоретически есть:
https://dl3.checkpoint.com/paid/0d/How_To_use_fwm_sic_reset.pdf?HashKey=1581612804_a60f2d08323884c1a1e492a143231a66&xtn=.pdf
но вы очень усложняете, зачем?
https://dl3.checkpoint.com/paid/0d/How_To_use_fwm_sic_reset.pdf?HashKey=1581612804_a60f2d08323884c1a1e492a143231a66&xtn=.pdf
но вы очень усложняете, зачем?
OK
Да и
Impact on the Environment and Warnings
Throughout this procedure, you delete and recreate the ICA on the management server.
This procedure deletes all certificates from a management server. All certificates need to be regenerated
and redistributed. You must establish SIC again with all gateways managed by this management server.
Therefore:
Consult with Check Point support engineers before recreating the CA.
Test this in a controlled lab first.
Make sure you have good backup (or even a snapshot) for the management server and that this
procedure is done during down time.
Impact on the Environment and Warnings
Throughout this procedure, you delete and recreate the ICA on the management server.
This procedure deletes all certificates from a management server. All certificates need to be regenerated
and redistributed. You must establish SIC again with all gateways managed by this management server.
Therefore:
Consult with Check Point support engineers before recreating the CA.
Test this in a controlled lab first.
Make sure you have good backup (or even a snapshot) for the management server and that this
procedure is done during down time.
Д
Да и
Impact on the Environment and Warnings
Throughout this procedure, you delete and recreate the ICA on the management server.
This procedure deletes all certificates from a management server. All certificates need to be regenerated
and redistributed. You must establish SIC again with all gateways managed by this management server.
Therefore:
Consult with Check Point support engineers before recreating the CA.
Test this in a controlled lab first.
Make sure you have good backup (or even a snapshot) for the management server and that this
procedure is done during down time.
Impact on the Environment and Warnings
Throughout this procedure, you delete and recreate the ICA on the management server.
This procedure deletes all certificates from a management server. All certificates need to be regenerated
and redistributed. You must establish SIC again with all gateways managed by this management server.
Therefore:
Consult with Check Point support engineers before recreating the CA.
Test this in a controlled lab first.
Make sure you have good backup (or even a snapshot) for the management server and that this
procedure is done during down time.
Благодарю.
Д
You must establish SIC again with all gateways managed by this management server
Есть ли возможность сбросить SIC для отдельного шлюза?
Есть ли возможность сбросить SIC для отдельного шлюза?