Global Technology Associates, Inc. - User's Forum

Unable to backup configuration via email

rcookdps — Wed, 09 May 2012 16:27:52 GMT

I'm trying to configure the automatic backup feature on a GB-2100 runing firmware 6.0.3.

I get the message "Unable to backup configuration via email" in the Configure - System - Information - Audit Evernts and also "Date pri=3 msg="XMLverify: Unable to backup configuration via email" type=mgmt" in Monitor - Log Messages - All.

Notifications are emailed correctly, so i'm thinking it may be due to the attachment or something - I have tried all 3 types selectable.

Any suggestions? Does the GB-2100 have its own SMTP server built in, as I cant find any options to specify any information.

Thanks

Force FW to send emails via internal NIC

CoffeeJunkie — Tue, 08 May 2012 09:47:37 GMT

Hi all,

I have three GTA FWs (2000e, 2*820) running 5.4.3, 6.0.3, and something < 5.4.3 I can't get to at the minute from FFox 12.

At some point all the FWs with one possible exception where set to email the IT dept at each change. I am trying to recreate that behaviour but have run into a glitch. We have moved email providers who do strict RBL blocking. Our internet lines are dynamic IP ADSL lines from a provider who pretty much has their entire dynamic range blacklisted on every list you can think of with the result that the FW's emails are getting rejected in connection. Is there any way I can get the FWs to either send their mail via the internal NIC or give them a false MX record of our internal mail servers each time? I should point out that the FWs do not do our DNS lookups for us (but DNS lookups traverse them) nor does any traffic go through port 25 to the outside world with the exception of the 2000e. Unfortunately the ADSL modem/routers don't have the facility to map the FW's SMTP traffic back into the network so I think it will have to be some fancy magic in the GTA boxes themselves.

Hope you can help.

Login management PAGE GB250

BG-GTASUP01 — Thu, 26 Apr 2012 13:34:45 GMT

The issue is as follows.
Ik have a GBG250. I can enter it througt consoleport. Regenerate the certificate. Config->Accounts->Remote Administration-> New SSL Certificate.
The save.

the "Configuration Verification" tells me VPN->Certificate "using the default certificate"

But in my client won't accept it in the browser as a viable certificate.

IE, Chrome and Firfox tell me the same.

Somehow It doesnt trust the CA.

Did someone else ever seen this problem?

GTA Firewall Administrator Poll - Back Up Options.

ForumAdmin — Tue, 24 Apr 2012 16:43:59 GMT

GTA Firewalls on version 6.0 and above support the following backup options;

USB Drive
Cloud - Dropbox
Cloud - Box.net
Email
Manual (Download configuration to local drive)
Script (Use script to automatically download the firewall configuration)

Firewalls on v5.4 supports the following backup options;

EMail
Manual (Download configuration to local drive)
Script (Use script to automatically download the firewall configuration)

USB, Email and cloud backup can be performed both manually and automatically.

GTA is interested in hearing what backup method you are using.

Wishlist

Rich — Sun, 22 Apr 2012 20:56:24 GMT

- Ability to update/create objects without dropping existing VPN connections.
- ability to update/add aliases without dropping connections
- better VPN troubleshooting information. It would be nice to see where the problems are, I.e phase 1/2 etc

Keep up the good work!

Beta of GB-OS 6.1.

ForumAdmin — Fri, 20 Apr 2012 17:46:20 GMT

GTA is looking for partners and customers who have an interest in trying the GB-OS v6.1 Beta. If you would like to add a firewall to the Beta list please send your information and serial number to: gbos-beta@gta.com.

To qualify for a beta release:
- Firewall must be covered by a current support or maintenance contract.
- End user must be willing to provide feedback on new features.

Please note that a GB-250 Revision A system cannot run GB-OS 6.1, (this model is well over 10 years old). If you are unsure if your firewall is a Revision A check the following; No USB ports, GB-250 Rev A firewalls do not have USB ports. Serial number lower than 65002100 and 65902100.

As always we are interested in your comments, observations and questions, so please do not hesitate to send them.

Below is a feature list of some items that will be in GB-OS 6.1. This is not a complete list but highlights some of the changes and additions. GB-OS 6.1 will be the first release of GB-OS with 64-bit support. GB-OS 6.1 reporting now supports authenticated user names in the reports in place of IPs for a more friendly/readable executive report.

Feature List for GB-OS 6.1
---------------------------------------------------------------
Certificate Management
- Support Revocation Lists (CRLs)
- Revoke Locally Generated Certificates
- Support for the PKCS#7 file format (.p7b) both DER and PEM

Country IP Range Support
- IPv4 & IPv6 Database
- Reports
- Web Admin UI
- Blocking

High Availability
- Improved Slave firewall Update User Interface
- Verify warning if slave not updated

Pass Through (No NAT)
- Remove NAT based on destination address

Static Mapping
- IP Address based on destination address

64-Bit Support
- GB-Ware (Includes 32 & 64 bit support)
- GB-2100
- GB-2500

DNS Names support for use in:
- Security Policies
- Objects with DNS Names in Security Policies.

Reports
- Additional report types
- User Names (instead of just IPs)
- Surf Sentinel Graphs
- Top 50 on GB-2100 and GB-Ware Unlimited
- Top 100 on GB-2500 and GB-Ware Enterprise

Strange PING issues over VPN

Rich — Thu, 19 Apr 2012 20:16:10 GMT

Hi All,

We have a GB800e at one site and a GB2000X at the other.

If I set a constant PING to a server at the remote site, then reset the VPNs(by saving the VPN - Site to Site section), the PINGS drop as you expect but sometimes they don't come back. The VPN does come up, and if I ping from another machine on the same local network, this one works fine. It only seems to affect the machine that was doing the constant PING.

Is this a Windows XP issue, or something strange occuring on the FW?

Cheers