19216811.liveDownloading the Precompiled Security Policy
Nokia IP45 Security Platform User’s Guide v4.0
281
Viewing IKE Traces
The following procedures describes how to view the IKE traces.
To view IKE traces
1.
Establish a VPN tunnel to the VPN site with which you are experiencing connection
problems.
2.
For information on when and how VPN tunnels are established, see
“Viewing VPN
Tunnels”
on page 279.
3.
Click Reports in the main menu, and click the VPN Tunnels tab.
4.
The VPN Tunnels page opens with a table of open tunnels to VPN sites.
5.
Click Save IKE Trace.
A File Download dialog box appears.
6.
Click Save.
The Save As dialog box appears.
7.
Browse to a destination directory of your choice.
8.
Type a name for the *.elg file and click Save.
The *.elg file is created and saved to the specified directory. This file contains the IKE traces
of all currently-established VPN tunnels.
9.
Use the IKE View tool to open and view the *.elg file.
10.
To clear the current IKE traces, click Clear IKE Traces.
Downloading the Precompiled Security Policy
For traditional policy management solutions, create a customized policy for each individual
customer. You can upload the customized High-Medium-Low *.pfz file from the SmartCenter
server to the Nokia IP45 security platform. The Check Point INSPECT engine enables you to
dynamically update a security policy, adding support for new applications and attaching
signatures to a firewall. The downloading procedure is as follows.
1.
The Check Point policy editor generates an INSPECT code.
Note
The INSPECT library can be manually edited by a network security professional in order
to add support for special applications.
2.
The policy editor adds policy rules to the INSPECT library and compiles a *.pfz (single
compressed signed file) file.
3.
The *.pfz file is then downloaded to the Nokia IP45 security platform by using the CLI.