Verify Communication Path Between Mars Appliance And Check Point Devices; Reset The Opsec Application Certificate Of The Mars Appliance - Cisco CS-MARS-20-K9 - Security MARS 20 User Manual

Check Point Devices

Verify Communication Path Between MARS Appliance and Check Point Devices

You should verify that the MARS Appliance can reach the Check Point devices, including the
SmartCenter server and the remote log servers. Use the telnet command at CLI of the MARS Appliance
to verify access to the SmartCenter server and log servers. The ports to check are defined in
Access Type for LEA and CPMI Traffic, page
In to the Appliance via the Console, page 6-2
Monitoring, Analysis, and Response System.
The command syntax is as follows
If you are unsuccessful, verify the settings of the ports for each Check Point component and verify that
no firewalls are blocking the traffic. For more information on telnet, see
and Setup Guide for Cisco Security Monitoring, Analysis, and Response System.

Reset the OPSEC Application Certificate of the MARS Appliance

If you encounter an error when pulling the certificate as part of defining the Check Point devices in the
MARS web interface, you must reset the certificate before you can attempt to pull it again. This
procedure details how to reset the certificate, or SIC, associated with the OPSEC Application that is
associated with the host that represents the MARS Appliance.
To reset the OPSEC application certificate, follow these steps:
Log in to the correct Check Point user interface using an account with administrative privileges.
Step 1
If you are using SmartCenter, use the SmartDashboard for that server. If you are using Provider-1 or
SiteManager-1 NG FP3 or NG AI (R55), use the SmartDashboard of the CMA. If you are using
Provider-1 or SiteManager-1 NGX, use the MDG.
Step 2 Select Manage > Servers and OPSEC Applications from the main menu.
Result: The Servers and OPSEC Application dialog box appears.
Select OPSEC Applications in the Show list.
Step 3
Select the OPSEC application that represents the MARS Appliance in the Servers and OPSEC
Step 4
Applications list, and click Edit.
Result: The OPSEC Application Properties dialog box appears.
User Guide for Cisco Security MARS Local Controller
4-36
telnet <ip_address> <port_number>
Chapter 4
4-32. For more information on accessing the CLI, see
of the Install and Setup Guide for Cisco Security
Configuring Firewall Devices
Select the
telnet, page A-56 in the Install
78-17020-01
Log