Enterasys Security Information and Event Manager, Руководство по настройке

Страница: 65 / 426

Configuring DSMs
Check Point FireWall-1 49
Step 2
Depending on your Check Point SmartCenter Server’s operating system, open the
following file:
In Linux:
$FWDIR\conf\fwopsec.conf
In Windows:
%FWDIR%\conf\fwopsec.conf
The default contents of this file are as follows:
# The VPN-1/FireWall-1 default settings are:
#
# sam_server auth_port 0
# sam_server port 18183
#
# lea_server auth_port 18184
# lea_server port 0
#
# ela_server auth_port 18187
# ela_server port 0
#
# cpmi_server auth_port 18190
#
# uaa_server auth_port 19191
# uaa_server port 0
#
Step 3
Change the default lea_server auth_port from
18184
to another port number.
Step 4
Remove the hash (
#
) mark from that line.
For example:
lea_server auth_port 18888
# lea_server port 0
Step 5
Save and close the file.
Step 6
Type the following command to start the firewall services:
cpstart
Configuring OPSEC LEA for Un-Encrypted Communications
To configure the OPSEC LEA protocol for un-encrypted communications:
Step 1
At the command-line prompt of your Check Point SmartCenter Server, stop the
firewall services by typing the following command:
cpstop
Step 2
Depending on your Check Point SmartCenter Server’s operating system, open the
following file:
In Linux:
$FWDIR\conf\fwopsec.conf
In Windows:
%FWDIR%\conf\fwopsec.conf
Step 3
Change the default lea_server auth_port from
18184
to
0
.
Step 4
Change the default lea_server port from
0
to
18184
.