Hi! Got this from the Phoneboy-Site. Think it will help you...
FireWall-1 listens for any IP-based traffic on all interfaces but ones deemed "external." In the NG release, external interfaces are defined in the firewall's workstation object, topology frame. Multiple external interfaces can be defined in NG, but FireWall-1 will not allow traffic to be routed between the external interfaces. In 4.1 and earlier releases, it is defined by the contents of the external.if <http://www.phoneboy.com/bin/view.pl/FAQs/ExternalDotIf> file. Only a single external interface is permitted in 4.1 and earlier releases. Anytime FireWall-1 hears hosts talking to each other with IP on non-external interfaces, it notes the IP addresses of the machines (In $FWDIR/database/fwd.h and $FWDIR/database/fwd.hosts). Once FireWall-1 has heard 'n' IP's (plus a 10% fudge factor), connections from the 'n+1' hosts will generate emails to root and messages to syslog or the event viewer. When the license is exceeded by a large number of hosts on a busy network, FireWall-1 will consume itself with logging and mailing out messages about exceeding your license. In many cases, this will cause the firewall to process traffic very slowly, if at all. ... Regards Thomas Kunz -----Urspr�ngliche Nachricht----- Von: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] Auftrag von Jos� Mar�a Gabald�n Gesendet: Donnerstag, 19. Februar 2004 19:56 An: [EMAIL PROTECTED] Betreff: [FW-1] License question Hi guys, This question is regarding the new licensing applied to R55, now FW-1 counts the number of users in stead of the number of protected IPs. The question is: does the firewall in R55 also counts the Ips that enter from the external network? Or does it only counts the IPs that goes out to the web? Can I buy a Check Point Express if I'm only protecting a web server that has more than 1000 users accessing it from Internet? Thanks in advance for your help, _______________________________ Jos� Mar�a Gabald�n Network Security Engineer email: [EMAIL PROTECTED] www.cybertech.com.ve ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
