How do I test the event stream in VigilEnt Security Agent for VPN-1/Firewall-1? (NETIQKB30627)

goal
How do I test the event stream in VigilEnt Security Agent for VPN-1/Firewall-1?

fact
VigilEnt Security Agent for VPN-1/Firewall ? 1.0 Foreign Kit

fact
VigilEnt Security Agent for VPN-1/Firewall ? 1.0 Domestic Kit

fact
VigilEnt Security Agent for VPN-1/Firewall ? 1 1.1

fact
VigilEnt Security Agent for VPN-1/Firewall ? 1 1.1.1

fact
Sun Solaris

fix

Follow the steps below to verify that the agent can access the firewall event stream.

1. Navigate to the VSAF/bin directory on the agent computer, where the VigilEnt product is installed.

2. Perform the event stream test by typing one of the following commands at the shell prompt:

   • Check Point version 4.1

     Windows:
     psDetect -B | lc -c 5

     Solaris:
     ./psDetect -B | ./lc -c 5

   • Check Point NG

     Windows:
     psDetectNG -B | lc -c 5

     Solaris:
     ./psDetectNG -B | ./lc -c 5

3. The text that is returned contains a header and several lines after the header. Similar output indicates a successful test. If you receive different output, contact Technical Support.

   

If the test is successful, you are ready to start the agent. Refer to the following knowledge base article.  

https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB30623

Formerly known as NETIQKB30627