The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
/var/log/messages file on Security Gateway shows that "show interfaces" command was executed during policy installation
| Solution ID |
sk107203 |
| Product |
Security Gateway, ClusterXL, Cluster - 3rd party |
| Version |
R75.40, R75.40VS, R75.45, R75.46, R75.47, R76, R77, R77.10, R77.20, R77.30 |
| OS |
Gaia |
| Platform / Model |
All |
| Date Created |
06-Aug-2015
|
| Last Modified |
09-Aug-2015
|
Symptoms
During policy installation, /var/log/messages file on Security Gateway shows the following Gaia Clish auditlog entries:
clish[PID]: user logged from admin
... ... ...
clish[PID]: User admin logged in with ReadWrite permission
clish[PID]: cmd by admin: Start executing : show interfaces ... (cmd md5: XXX)
clish[PID]: cmd by admin: Processing : show interfaces all (cmd md5: XXX)
... ... ...
clish[PID]: User admin logged out from CLI shell
Cause
Gaia OS queries and parses the configuration of VTI interfaces to populate the required data in VPND daemon and in VPN kernel.
Solution
|
Note: To view this solution you need to
Sign In
.
|
