Hi all,

I am very confused about dynamic objects pourpose. According to this sk: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=skI1915&js_peid=P-114a7ba5fd7-10001&partition=General&product=Security, I need to configure every dynamic object with an ip range. But how can I do a rule like this:

Source: mymaiserver   Destination:smtp.gmail.com  Service:smtp-tls ???

As you know, smtp.gmail.com use a different ip every day or after some hours. Is not possible to define an object like smtp.google.com without ip or ip range??

Using dynamic objects for several security gateways that can be resolved it is a really advantage, but if it is mandatory to configure an ip range for every dynamic object, I have a serious doubts ...

This type of rule it is really simple to install under linux iptables based firewalls, openbsd fws and stonegate fws ... Why not under CP??

 Thanks.


---
CL Martinez
carlopmart {at} gmail {d0t} com

Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

Reply via email to