Insight Agents on Checkpoint Secure Firewall

[Larry Shaw]

We have installed Checkpoint Secure Firewall Linux version on HP Proliant servers. We would like to install Insight agents to monitor the hardware. The Linux agent installs appear to require Linux components which have been removed from the "secure platform."

Has anyone else successfully set up Insight Agents to monitor these boxes? If so, can you point us to an install source or process?

[David Claypool · Accepted solution]

Can you be more specific? Are you referring to a need for kernel source, etc? Refer to the doc "Managing ProLiant Servers with Linux" from http://www.hp.com/go/proliantlinux which tells you how to build RPMs to redistribute.

[Sean Ostermann]

We are having the same issue and have reached a wall at CheckPoint. The problem comes from the Secure Firewall runs it's own version of Linux and does not supply the kernel headers. I've tried to install the agents on the system and they fail when they chaeck for the kernel headers. So back to the question, has anyone sucessfully run the Insight Manager agents on a Checkpoint secure firewall platform?

[David Claypool]

This is from the FAQ for the ProLiant/Check Point bundle:

"Is Insight Manager agent installed on the SolutionPaq?

We do not support Insight Manager agents due to kernel version dependencies and the security risks associated with SNMP based daemons."

Since HP SIM supports WBEM, you might try OpenWBEM or OpenPegasus to get some data.

[Sean Ostermann]

Thanks,

this is the type of info we are looking for.

Sean