NSM screenos support

[player]

Hi all,

i have NSM-2007.3r1 and it seems it doesn't support the screenos 6.0.3 (please correct me if i'm wrong)

when i try to add my isg1000 with 6.0.3 the nsm reports of incapability to fetch the screenos device.

my q's :

1.is there a chance that i'm doing somthing wrong anf that version does support the 6.0.3 version?

2.what nsm version does support the 6.0.3 , can any1 please post the procedure howto upgrade from my current nsm version

[Daniele]

Hi,

 NSM2007.3 supports ScreenOS 6.0 natively without needs for any "support schema update".

Can you check both software versions for NSM and the firewall device?

On the NSM server:

/etc/init.d/guiSvr version

On the ScreenOS device:

get system

Let me know!

Ciao

Daniele

[player]

Hi Daniele,

the nsm version is - 2007.3r1

and isg1000 version is - 6.0.0r3.0 or 6.1.0r3.0

is it supported?

Message Edited by player on 02-17-2009 09:31 AM

[CN]

With 2007.3r1, you can manage devices running ScreenOS 6.0, however to manage ScreenOS 6.1, you will need to install the Forward Support Schema Update.

Thanks,
Chandra

[player]

what is the 'Forward Support Schema Update' ?

what is the procedure of the upgrade?

do i need to upgrade my nsm client also?

[CN]

Whenever a new release of ScreenOS comes out, until NSM starts supporting all the new features of this version, an interim release is done called "Forward Support Schema Update".

Eg. NSM 2007.3rX supported all releases until ScreenOS 6.0. After the release of 2007.r3, we had ScreenOS 6.1 that got released. Since we have customers who would like to use the new features of 6.1, we release the forward support update, which after installing on the NSM server & NSM GUI client, you can manage a device running ScreenOS 6.1.

Hope this clarifies.

Thanks,

Chandra 

[player]

so if i understand correctly the nsm 2007.3rx can support 6.1 but it requeires an installation of the forward support update?

my next question is how can i get the forward support update?

[Daniele]

Hi,

the 'forward support update" is available on Juniper download website here:

https://softserv.juniper.net/download/2007.3---11282007/NetScreen-Security_Manager/

You need to download:

nsm2007.3r1_schema_update_server : for the NSM server
nsm2007.3r1_schema_update_ui_win : for windows GUI client

nsm2007.3r1_schema_update_ui_linux : for Linux GUI client

Schema update providing additional NSM support for ScreenOS 6.1 and IDP 75, 250, 800 and 8200 devices

The installation is a simple unpack & execute.

Ciao

Daniele

Message Edited by Daniele on 02-18-2009 11:35 AM

[r0mm3L]

hello guys,,

question: at what location should i install the server schema?

[CN]

If you have chosen default for NSM installation, then choose the same for Forward Support Schema installation as well. The default is /var/netscreen.

The best way to see what directory you have used is to by doing

ls -l /usr/netscreen/GuiSvr/

Identify where the softlink for var is pointing to & that's your install directory.

Thanks,
Chandra