project - log settings identify

From cpwiki.net
Revision as of 17:10, 31 October 2013 by Nighthawk (Talk | contribs)

Jump to: navigation, search
Check Point Profressional Services

Problem:

indentify firewalls configured to log to CMA, or locally... anything except for CLM only.


script name:

???


scratch

mdsenv <ip>

cpmiquerybin attr "" network_objects "firewall='installed'" -a __name__ ###indentify all firewalls


cpmiquerybin object "" network_objects "name='kdallabfw1'" | grep self_log_server | sed -n 's/.*(\([^ ]*\))/\1/p' | grep -v ^$

cpmiquerybin object "" network_objects "name='kdallabfw1'" | grep forward_logs | sed -n 's/.*(\([^ ]*\))/\1/p' | grep -v ^$

cpmiquerybin object "" network_objects "name='kdallabfw1'" | grep log_switch_before_forwarding | sed -n 's/.*(\([^ ]*\))/\1/p'

cpmiquerybin object "" network_objects "name='kdallabfw1'" | grep -A 1 log_forward_target | grep ":Name" | sed -n 's/.*(\([^ ]*\))/\1/p'

multiple results possible

cpmiquerybin object "" network_objects "name='firewall_name'" | sed -n -e '/:send_logs_to/,/:self_log_server/ p' | grep -E ":Name |self_log_server (true)"

backup_log_servers