Is IPSec running???

[Darrell Tschakert]

Hi,
I hope that I have posted this in the right area.

A recent HP Security Bulletin suggests upgrading to the latest version of IPSec. My question is, how do I know if we are running IPSec. I don't think we are. Running the following:

swlist -l bundle | grep IPSec
swlist -l product | grep IPSec
find / -name ipsec -print
find / -name IPS -print

all come up with nothing.

Can I assume that we are not running IPSec?
Thanks,
Darrell Tschakert
EEOC Washington, DC

[Pete Randall · Accepted solution]

You could try searching for the product number (J4256AA) or you could add the -i option to your grep to increase your chances:

swlist -l bundle | grep -i ipsec


Pete

[Sundar_7]

I believe ipmon is the process for the IPSec...

# ps -ef | grep -i ipmon

[Darrell Tschakert]

Sundar,
We have ipmon running. However, I still don't see any indication that we have IPSec loaded such as the "swlist -l ??? | grep -i ipsec".

I have tried googling "ipmon IPSec HP-UX" and gotten some hits, but the docs.HP.com seems not to be working this morning.

Does anybody have any other ideas?

Thanks,

Darrell Tschakert

[Sundar_7]

Try this

# swlist -l file | grep -i ipmon

[Darrell Tschakert]

Sundar,
Running "swlist -l file | grep -i ipmon" is, of course, going to show me ipmon because we have ipmon running. And we have a man entry for ipmon. However, I still don't have any proof that we have IPSec loaded. Ipmon came with IPF which, I assume, stands for IP Filter.

Thanks,

Darrell

[Sundar_7]

Well, then I was probably wrong in assuming ipmon is the daemon for IPSEC. Now I learned it is not.

Check if you have /usr/sbin/ipsec* binaries. If you dont, and grep against swlist is not fetching you anything, it probably means you are not running IPSEC.

[Darrell Tschakert]

Sudar,
As I wrote in my original posting:
...
find / -name ipsec -print
find / -name IPS -print

all came up negative.

DTschakert

[Darrell Tschakert]

I don't have IPSec running.
There is nothing to indicate that it is loaded on these HP's.

Thanks,

Darrell Tschakert