Greetings!
> Adding an http resource will increase the security for all requests
> that match that rule for http.
Make sure that you configure the HTTP resource right or you might
actually open up your system instead of tightening it:
http://www.securityfocus.com/archive/1/257016
The ressource (actually a proxy server) will change the source IP to the
one of your FW, too. If you pass HTTP traffic from the WWW to your web
server in DMZ via a HTTP resource you won't be able to run all possible
log evaluations (e.g. for session tracking) as the source IP always is
the same...
Bye
Volker Tanger
ITK-Security
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
