v.r,

For this scenario you need to use a 'fw fetch <management address>' on the
enforcement module, if there is no route from the Management server to the
module.  This forces the module to 'fetch' the policy from the management
server instead of pushing it.  This needs an internal route to the
management server from the internal interface to work, although I presume
you already have this.

regards
Steve.

-----Original Message-----
From: v.r [mailto:[EMAIL PROTECTED]
Sent: woensdag 2 april 2003 14:56
To: [EMAIL PROTECTED]
Subject: [FW-1] firewall object


Hello,

When you are creating a firewall object in the
managerment server, if you give the ip address of the
object as the external interface of the firewall,  how
it will be able to reach the enforcement module? as
normally the firewall external interface will not have
a route from the  internal side.

thanks,
v.r



________________________________________________________________________
Missed your favourite TV serial last night? Try the new, Yahoo! TV.
       visit http://in.tv.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to