On Wed, Oct 15, 2003 at 06:53:56PM +0300, Peter Kirkov wrote:
> Set the SecureClient ( DesktopSecurity in SMartDashboard) in order to
> protect the client from viruses.

Ha, world is not as simple. The owner of that notebook is using
it for other purposes and it is his private property. He will
absolutely not accept to be covered by SecureClient all the time,
and to have set his policy by a central management of the IT
department. (The owner of this notebook can't be administratively
overriden, since he is the director of the IT department.)

It is acceptable if the notebook is under control of SecureClient
for those 10 minutes a day when the client is connected to the
company network. It is not acceptable for the 23:50 of the day when
he isn't. Then he needs the XP Firewalls.

There are two problems:

- Turning on and off the XP Firewall is too much overhead.

- The gap between turning one firewall off and the other on allows
  attacks.

So it should be possible to configure the XP firewall to simply
allow what's needed for running SecureClient.

Hadmut

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to