There was a big discussion on this yesterday. This is a limitation of SmartDefense, and it has not been corrected in NGX.
----------------------------------------------- Tony Pombo Systems and Security Architect Edict Systems, Inc. 937-429-4288 x279 [EMAIL PROTECTED] -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Sascha Picchiantano Sent: Wednesday, October 26, 2005 9:47 AM To: [email protected] Subject: [FW-1] Does NGX support selective SmartDefense? Hi, I think a big drawback of SmartDefense in NG is that you can not disable it for certain destinations or sources. Say you have enabled to block non-ascii characters in HTTP then this is on for all HTTP communications, no matter what. Now say you know of a website that's basically secure and you need to have access to it, but it is being blocked by SmartDefense because it sends out non-asciii characters in HTTP headers. Now what do you do: Don't access the site or disable the character checking? Now... maybe there is an answer for this in NGX? Thanks Sascha ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
