GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

ESM v8.1 Build7022008

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Network Security] >> GFI EventsManager >> ESM v8.1 Build7022008 Page: [1]
Login
Message << Older Topic   Newer Topic >>
ESM v8.1 Build7022008 - 4.Jul.2008 12:41:48 PM   
imatone

 

Posts: 102
Score: 0
Joined: 6.Aug.2007
Status: offline
Has anyone tried the latest build of ESM v8 Build7022008 & ESM ReportPack? I've just upgraded mine this afternoon! The license key may be questionable. Dejavu or what! Remember way back in Feb 2008 when v8 was released, the key didn't work.  

We have experienced a number of issues included but not limited to:
1. Invalid lic key stopping EventsManager service. Had to revert to Evaluation!
2. Using the latest build, it seems only Windows 2003 Domain Controller Group can accept events. I couldn't receive any Windows events from all my Windows XP, Server clients,
3. Cisco PIX & Linux servers are not sending me any syslogs either.

Am I the only one?
Post #: 1
RE: ESM v8.1 Build7022008 - 6.Jul.2008 3:37:06 AM   
imatone

 

Posts: 102
Score: 0
Joined: 6.Aug.2007
Status: offline
As a follow-up message, I'd manage to get #1 & 2 working NOW. Didn't bother to t-shoot what went wrong. Now, I have to figure out how to get the syslogs or any logs from my PIX.

(in reply to imatone)
Post #: 2
RE: ESM v8.1 Build7022008 - 8.Jul.2008 1:36:34 PM   
DrewE

 

Posts: 436
Score: 0
Joined: 28.Apr.2008
From: Cary, NC
Status: offline
As a test, there are several 3rd-party 'Sys Log Generators' that you can install on the GFI EventsManager server.  These can generate sample syslog messages that can be sent to our product.  This will quickly help you determine if the configuration issue is with our software, or your routers.

_____________________________

Drew Easley - Technical Support Representative
GFI Software - www.gfi.com

(in reply to imatone)
Post #: 3
RE: ESM v8.1 Build7022008 - 8.Jul.2008 1:54:16 PM   
imatone

 

Posts: 102
Score: 0
Joined: 6.Aug.2007
Status: offline
Hi Drew,
I'm using Kiwi Syslog Daemon and it is sending my ESM v8 logs but not my PIX from my notebook. Any info of how the PIX or Cisco Catalyst 29x0/37x0 should be configured to send ESM v8 something logs. Syslogs or SNMP traps!

(in reply to DrewE)
Post #: 4
RE: ESM v8.1 Build7022008 - 15.Jul.2008 2:53:29 PM   
DrewE

 

Posts: 436
Score: 0
Joined: 28.Apr.2008
From: Cary, NC
Status: offline
I am unaware of the necessary settings on the Cisco device in order to get sys logging functioning. 

Just to clarify do you notice that either of these are occurring:

  • Your Kiwi Syslog software is detecting syslog messages from your Cisco device
  • Kiwi Syslog Generator can send syslog messages into GFI EventsManager


_____________________________

Drew Easley - Technical Support Representative
GFI Software - www.gfi.com

(in reply to imatone)
Post #: 5
RE: ESM v8.1 Build7022008 - 17.Jul.2008 7:55:47 PM   
imatone

 

Posts: 102
Score: 0
Joined: 6.Aug.2007
Status: offline
After adjusting the event level of the PIX (increasing to higher level to broadcast more events), our ESM v8 server is capturing events from the PIX, Blue Coat & even Barracuda. Everything is working fine now. Tks Drew!

(in reply to DrewE)
Post #: 6
Page:   [1]
All Forums >> [Network Security] >> GFI EventsManager >> ESM v8.1 Build7022008 Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


   © 2008. All rights reserved. GFI Software Home Products Download Trials Support Ordering Site Map About Us Contact us
GFI solutions: Exchange anti spam filter - exchange anti virus - isa server - network vulnerability scanner - event log management - USB security software - exchange archiving - fax server software