NSM – Files and Folders

There are 3 areas with NSM. DevSvr, GuiSvr and HaSvr. The following files and paths are based on NSM 2008. Below shows the main path structure (Redhat) and what each Server (Svr) does.

/usr/netscreen/DevSvr/ – DevSvr – Logging and the NSM database
/usr/netscreen/GuiSvr/ – GuiSvr – NSM GUI
/usr/netscreen/HaSvr/  – HaSvr  – Backups and High Availability.

DevSvr
/usr/netscreen/DevSvr/var/devSvr.cfg        – DevSvr config file
/usr/netscreen/DevSvr/var/logs                 – NSM Database logs
/usr/netscreen/DevSvr/var/errorLog/         – Error Logs
/usr/netscreen/DevSvr/utils/                    – utilities

GuiSvr
/usr/netscreen/GuiSvr/var/guiSvr.cfg      – GuiSvr config file
/usr/netscreen/GuiSvr/var/errorLog/       – Error Logs
/usr/netscreen/GuiSvr/var/xdb              – Database files (when in directory you can use `du -h –max-depth=1` to determine the if the DB is growing)

HaSvr
/usr/netscreen/HaSvr/var/haSvr.cfg      – Ha config file
/usr/netscreen/HaSvr/var/errorLog/      – error log directory
/usr/netscreen/HaSvr/utils/haStatus     – show HA status
/usr/netscreen/HaSvr/utils/                 – Ha utilities
/usr/netscreen/HaSvr/bin/.haDoLocal.result           – Contains the syntax used to perform the local daily backup.
/usr/netscreen/HaSvr/bin/.backupDoLocal.result    – Rsync errors. The file is over written each time a back is performed.
/usr/netscreen/HaSvr/bin/.backupDoLocal.remote – Same as above but for remote backup

Misc
/var/netscreen/dbbackup/exclude.rsync – exclude files from the backup.
/etc/init.d/guisvr version  – outputs NSM Version

Rick Donato

Want to become an IT Security expert?

Here is our hand-picked selection of the best courses you can find online:
Internet Security Deep Dive course
Complete Cyber Security Course – Hackers Exposed
CompTIA Security+ (SY0-601) Certification Complete course
and our recommended certification practice exams:
AlphaPrep Practice Tests - Free Trial