Hi,
Cluster HA, Cp-NGx R62 on splat:
we have an active ftp session that try to transfer lot of smal file
from/to a client to a server FTP (up/download)

The Client gives us a "communication error" and
CP logs this:


Product:                       SmartDefense
Interface:                     eth1
Origin:                         a.b.c.d
Type:                           Log
Action:                         Reject
Protocol:                       tcp
Service:                       ftp-basic (21)
Source:                         d.e.f.g
Destination:                 StaticNatIP02 (h.i.l.m)
Source Port:                 4656
Attack Name:               FTP Bounce
Attack Information:       Port/227 command missing a newline character
SmartDefense Profile:                 No Protection

1st we are not using a "ftp-bounce attack"
2nd Smartdefence is in Monitor only (smartdashboard).

How can I disable Smartdefence totally on the FTP protocol?

Thanks

Corrado

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to