Hi, > I am wondering if anyone has a solution for Checkpoint to allow all > http/ftp traffic from liveupdate.symantec.com to be allowed outbound to > retrieve liveupdates. I have noticed that liveupdate.symantec.com > resolved to many IP addresses and simply creating a host object for each > address will not work.
> Any ideas? If I had to do that, I would create a host-object for each IP# and would put all in a group and allow outbound-traffic to the group for ftp and http. I saw 3 IP# for liveupdate.symantec.com, why wouldn't it work to create a host-object for each of those three IP#? Do they often change their IP#? HTH Christian -- Aus einer Versicherungsmeldung: Als ich auf die Bremse treten wollte, war diese nicht da. Christian Schlegel - http://rana.at - [EMAIL PROTECTED] ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
