You can configure wire mode (equal bypass bypassing Security Gateway 
enforcement and so stateful inspection) if you have a VPN between the subnets.

-----Original Message-----
From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On 
Behalf Of sin
Sent: February-11-08 4:33 PM
To: [email protected]
Subject: Re: [FW-1] disable stateful inspection only for a subnet or only 
between two subnets

pkc_mls wrote:
> Hi all,
> 
> is there a way to disable stateful inspection only between two subnets ?
> 
> the goal is to allow asymetric routing when the incoming router is not 
> the firewall.
> I know the best option is to fix the routing, but is there a workaround ?

unless something changed in the last 3-4 month in how CP works, the 
answer is no.

i asked almost the same question to a cp SE a few months back when one 
of our customers requested this because the fw was dropping traffic and 
they were loosing money (traffic paid by megabyte by the end users) and 
the SE almost laughed in my face :))

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

No virus found in this incoming message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.20.4/1275 - Release Date: 12/02/2008 
3:20 PM
 

No virus found in this outgoing message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.20.4/1275 - Release Date: 12/02/2008 
3:20 PM
 

Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to