Hi, If you have decided to go with eSafe, I would suggest to use it as a smtp gateway for your network. Using it as CVP gives load on firewall and will not allow you to use the full functionality of eSafe in fighting email based attacks.
Regds, Ramakrishnan >>> [EMAIL PROTECTED] 02/24/05 2:06 AM >>> Hi, Thanks for your opinion Decision is eSafe product because of this that we have running Checkpoint SmartView Reporter with configured reports and if I use external proxy like TrendMicro this system will be useless. eSafe can work as CVP server so I think we try it. I also read about new features of eSafe 4 and it looks very interesting. Oh and one more question about performance. What configuration is required for eSafe (500 users). Currently I have dedicated machine for antivirus. This is HP ProLiant DL360G4 with 1 3GHz processor and 1GB RAM. Maybe this is not enough for 500 users. What do you think? Pawel -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Reinhard Stich Sent: Wednesday, February 23, 2005 10:47 AM To: [email protected] Subject: Re: [FW-1] CheckPoint and TrendMicro At 08:15 23.02.2005, you wrote: >Thanks for answer about eSafe product. >Could you tell me if you notice any problem with eSafe and ChceckPoint >cooperation? it works without problems here - well there are some issues using security servers but these are checkpoint related ... >What about virus detection rating according to TrendMicro updates are quicker, esafe is specialised on gateway protection, trend on client and server protection cheers reinhard >and what about spyware module? Is ot also good. Currently we haven't >any spyware detecton software. What hardware configuration is required >for eSafe? > >Greetings >Pawel > > >-----Original Message----- >From: Mailing list for discussion of Firewall-1 >[mailto:[EMAIL PROTECTED] On Behalf Of >Reinhard Stich >Sent: Tuesday, February 22, 2005 12:07 PM >To: [email protected] >Subject: Re: [FW-1] CheckPoint and TrendMicro > >At 11:25 22.02.2005, you wrote: > >I consider to change TrendMicro to Alladin eSafe 4.0 because of CVP > >option. But now when You told me about such configuration with > >trendmicro maybe I stay on it. I must test it on a few users if > >authentication works. > >We have CheckPoint NG R55 in cluster mode and 2 moduls as CVP servers: > >TrendMicro antivirus and SecureComputing SmartFilter - URL filter > >I just want to confirm that eSafe is really a great gateway product! > >cheers >reinhard > > >Pawel > > > > > >________________________________ > > > >From: Marco Rubeck [mailto:[EMAIL PROTECTED] > >Sent: Tuesday, February 22, 2005 11:16 AM > >To: Serwatko Pawel > >Subject: Betreff: RE: Betreff: RE: Betreff: [FW-1] CheckPoint and > >TrendMicro > > > > > >We have Checkpoint Firewall-1 and VPN-1, NG FP 3, HFA 326 Trend Micro > >Office Scan, Server Protect, Interscan Messaging Security Suite and > >Interscan Web Security Suite If you have any questions concerning > >these > > >products don't hesitate to ask > > > >Marco > > > >-------Originalmeldung------- > > > >Von: Serwatko Pawel <mailto:[EMAIL PROTECTED]> > >Datum: 02/22/05 10:57:27 > >An: Marco Rubeck <mailto:[EMAIL PROTECTED]> > >Cc: [EMAIL PROTECTED] > >Betreff: RE: Betreff: RE: Betreff: [FW-1] CheckPoint and TrendMicro > > > >ok, thanks > >I've just been installing this product and try to configure it. > >Thanks > >Maybe I need some help later I mail to if You don't mind. > > > >Greetings > >Pawel > > > > > >________________________________ > > > >From: Marco Rubeck [mailto:[EMAIL PROTECTED] > >Sent: Tuesday, February 22, 2005 10:42 AM > >To: Serwatko Pawel > >Subject: Betreff: RE: Betreff: [FW-1] CheckPoint and TrendMicro > > > > > >If I get you right ... > >The users have to authenticate to get access to the internet? > >You can configure user authentication on the proxy server (IWSS), e.g. > >with LDAP > >So you can restrict internet access for the users and grant it to the > >proxy There is only one problem I encountered so far : > >If you want to visit something like www.mydomain.com:2167, i.e. a > >website with a specific port, that will not work via the proxy, you > >will have to disable the proxy on the client to view this site > > > > > >Greetings > >Marco > > > >-------Originalmeldung------- > > > >Von: Serwatko Pawel <mailto:[EMAIL PROTECTED]> > >Datum: 02/22/05 09:28:15 > >An: Marco Rubeck <mailto:[EMAIL PROTECTED]> > >Betreff: RE: Betreff: [FW-1] CheckPoint and TrendMicro > > > >Hi > >One question more > >We have partialy authhentication configured on firewall in rule with > >resource. That is our security policy that every user must be > >authenticated by firewall. Is it possible to configure in this way > >and safe firewall authentication? > > > >Pawel > > > > > >________________________________ > > > >From: Marco Rubeck [mailto:[EMAIL PROTECTED] > >Sent: Tuesday, February 22, 2005 8:32 AM > >To: Serwatko Pawel > >Cc: [email protected] > >Subject: Betreff: [FW-1] CheckPoint and TrendMicro > > > > > > Hi there, > > > >we have the same configuration. We had Interscan Viruswall with CVP > >enabled and now we changed it to Interscan Web Security Suite. > >There's absolutely no problem with that, you only have to make sure > >that all clients use the IWSS-Server as a proxy server. > >The proxy server works for http and ftp, so you can alter your rules > >that only the proxy can acces the internet via these services > > > >Greetings > >Marco > > > >-------Originalmeldung------- > > > >Von: Serwatko Pawel <mailto:[EMAIL PROTECTED]> > >Datum: 02/21/05 14:54:26 > >An: [email protected] > >Betreff: [FW-1] CheckPoint and TrendMicro > > > >Hello everybody. > >I have a question about new TrendMicro product. > >Currently we have Checkpint NG with TrendMicro Interscan Virus Wall > >working as CVP server. As I know this kind of work (CVP) is not > >available in new version - Trend Micro Web Security Suite. Does > >anybody > > >have such configuration? How is this work in new product without CVP > >option? > >Is this possible to work and how to configure new TrendMicro IWSS to > >work with Checkpoint Firewall NG? > > > > > >Thanks for any help with it. > > > >Pawel > >[EMAIL PROTECTED] > > > >================================================= > >To set vacation, Out-Of-Office, or away messages, send an email to > >[EMAIL PROTECTED] > >in the BODY of the email add: > >set fw-1-mailinglist nomail > >================================================= > >To unsubscribe from this mailing list, please see the instructions at > >http://www.checkpoint.com/services/mailing.html > >================================================= > >If you have any questions on how to change your subscription options, > >email [EMAIL PROTECTED] > >================================================= > > > > > > > > > > > > > > > > > >================================================= > >To set vacation, Out-Of-Office, or away messages, send an email to > >[EMAIL PROTECTED] > >in the BODY of the email add: > >set fw-1-mailinglist nomail > >================================================= > >To unsubscribe from this mailing list, please see the instructions at > >http://www.checkpoint.com/services/mailing.html > >================================================= > >If you have any questions on how to change your subscription options, > >email [EMAIL PROTECTED] > >================================================= > >-- >Reinhard Stich ASSIST [EMAIL PROTECTED] >Internet Security AG, 1150 Wien, Johnstrasse 29 >Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > >================================================= >To set vacation, Out-Of-Office, or away messages, send an email to >[EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your subscription options, >email [EMAIL PROTECTED] >================================================= > >================================================= >To set vacation, Out-Of-Office, or away messages, send an email to >[EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your subscription options, >email [EMAIL PROTECTED] >================================================= -- Reinhard Stich ASSIST [EMAIL PROTECTED] Internet Security AG, 1150 Wien, Johnstrasse 29 Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
