-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

cisco4ng <[EMAIL PROTECTED]> wrote:
>
> are your enforcement modules (aka firewalls) Nokia or SPLAT?  Yes, in
> the gateway cluster object general properties, if you check the
> "ClusterXL" box, the 3rd party will show up.

All of our firewalls are Nokia, except for one Nortel ASF.  All of them
have ClusterXL unchecked in their software setup, so that is why I
believed that "3rd Party Config" was always available.  I see what you
mean, that when you enable ClusterXL, there is no longer an option to
stop hiding cluster traffic behind the cluster IP.

I am curious though if the option can still be disabled via guidbedit.
The gateway property item seems to be "perform_cluster_hide_fold".
Not sure if ClusterXL will respect that setting, but it's worth a try.

- -- 
David DeSimone == Network Admin == [EMAIL PROTECTED]
  "It took me fifteen years to discover that I had no
   talent for writing, but I couldn't give it up because
   by that time I was too famous.  -- Robert Benchley
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFHCmqAFSrKRjX5eCoRArnJAJ4ziRodGio0/moSsHhcwNVgTu1eVQCfcW7D
vu1eow/U1ljcx+XkaMCU+Vk=
=Gjk2
-----END PGP SIGNATURE-----

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to