Hi,

If that's the only option than I guess that's how we will do it.
But it's a tedious job and error prone, so I'd like sth. easier (if 
possible).

Tom.

---------------------------------------------------------------------------
Tom Van Overbeke - ABSI Service Delivery Coordinator
email: [EMAIL PROTECTED]
Tel: +32 2 333 40 00 - Fax: +32 2 332 34 69
website: http://www.absi.be
---------------------------------------------------------------------------





Edward Luck <[EMAIL PROTECTED]>
Sent by: Mailing list for discussion of Firewall-1 
<[email protected]>
31/01/2006 11:41
Please respond to Mailing list for discussion of Firewall-1
 
        To:     [email protected]
        cc: 
        Subject:        Re: [FW-1] smartdefense on NGX R60


Why don't you put it into "Monitor Only" mode?  That way it won't stop
the traffic, just let you know that it would have stopped it.  You can
then selectively activate features into normal mode as required.

On 1/31/06, Tom Van Overbeke <[EMAIL PROTECTED]> wrote:
> Hi,
>
>
> I would like to know if there is an easy way to disable/enable
> smartdefense without losing all the customizations.
>
> Background:
>
> We are implementing smartdefense on a firewall of our customer, checking
> each available option and then decide whether to enable/disable it, and
> possible customize some parameters.
>
> Now, we regularly do nessus scans on our network, and my impression is
> that these are less accurate since smartdefense kicks in from time to 
time
> to stop some of the checks (which is actually quite normal, that's wat
> smartdefense does).
>
> I would like to be able to disable smartdefense completely without 
losing
> its configuration, run the scans, and afterwards re-enable it with the
> previous configuration.
>
> My impression is that smartdefense doesn't keep its configuration in the
> firewall policy, is this correct ? and is there a way to turn 
smartdefense
> globally off while retaining all the customizations we made ?
>
>
> thanks,
>
> Tom.
>
>
> 
---------------------------------------------------------------------------
> Tom Van Overbeke - ABSI Service Delivery Coordinator
> email: [EMAIL PROTECTED]
> Tel: +32 2 333 40 00 - Fax: +32 2 332 34 69
> website: http://www.absi.be
> 
---------------------------------------------------------------------------
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>


--
Keep flying, and stay shiny.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to