Tom
I just had a brief discussion about this with my checkpoint reps
the other day and the impression that I have is that you could put the
smart defense rules into "Monitor" mode, which is a new feature in NGX.
I'm not sure about entirely disabling it though that question did not get
brought up.
Hope this helps.
Dean
Tom Van Overbeke <[EMAIL PROTECTED]>
Sent by: Mailing list for discussion of Firewall-1
<[email protected]>
01/31/2006 05:08 AM
Please respond to
Mailing list for discussion of Firewall-1
<[email protected]>
To
[email protected]
cc
Subject
[FW-1] smartdefense on NGX R60
Hi,
I would like to know if there is an easy way to disable/enable
smartdefense without losing all the customizations.
Background:
We are implementing smartdefense on a firewall of our customer, checking
each available option and then decide whether to enable/disable it, and
possible customize some parameters.
Now, we regularly do nessus scans on our network, and my impression is
that these are less accurate since smartdefense kicks in from time to time
to stop some of the checks (which is actually quite normal, that's wat
smartdefense does).
I would like to be able to disable smartdefense completely without losing
its configuration, run the scans, and afterwards re-enable it with the
previous configuration.
My impression is that smartdefense doesn't keep its configuration in the
firewall policy, is this correct ? and is there a way to turn smartdefense
globally off while retaining all the customizations we made ?
thanks,
Tom.
---------------------------------------------------------------------------
Tom Van Overbeke - ABSI Service Delivery Coordinator
email: [EMAIL PROTECTED]
Tel: +32 2 333 40 00 - Fax: +32 2 332 34 69
website: http://www.absi.be
---------------------------------------------------------------------------
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
