That's a really big irritation in my book. There are a LOT of services
not included in "ANY" and this broke my site-site VPN for quite some
time when I upgraded from 4.1 to NG until I figured this out. This also
makes the rule base a lot more ugly than it really needs to be (you
can't add additional services to a rule that you also want to have "ANY"
so you need extra rules.
Examples of items not included in "ANY"
X11
Microsoft RPC
...

--
Jon Allingham
Director, IVT
Leapstone Systems


-----Original Message-----
From: Robert MacKinnon [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 18, 2003 2:03 PM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] NG AI StateSync is not working -RESOLVED

Checkpoint's concept of Any doesn't necessarily match the rest of the
world's concept of any.  CP's Any means "any protocol listed in Services
that has the box "Match for any" checked in the Advanced submenu for the
service" (whew).

At 18:30 18.11.2003, you wrote:
>That ANY destination....tricky little thing it is

         - Rob.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to