One of out customers uses bridging of SNA. It comes through as UDP on
port 1800-or-thereabouts.
cheers,
Alexander
Daniel Hitchcock <[EMAIL PROTECTED]> writes:
> Clarification:
>
> Checkpoint doesn't care at all about SNA (or any other non-IP) traffic. For
> example, a Checkpoint firewall will happily route IPX traffic as long as
> your OS is configured to do so. Since SNA is non-routable, your firewall
> will only pass it if you can get your OS to bridge SNA. So, Elliot's
> suggestion about encapsulating SNA is excellent (as long as you can get
> someone on both ends to configure the routers correctly).
>
> $0.01 :)
>
> Dan Hitchcock
> CCNA, CCSE, MCSE
> Security Analyst
> Breakwater Security Associates
> 206.770.0700 x147
> dhitchcock (at) breakwatersecurity (dot) com
> http://www.breakwatersecurity.com
>
>
>
>
> -----Original Message-----
> From: Elliot Spiegel/Markham/IBM [mailto:[EMAIL PROTECTED]]
> Sent: Monday, May 07, 2001 1:25 PM
> To: Lior Arbel/Israel/IBM
> Cc: [EMAIL PROTECTED]
> Subject: Re: [FW1] Does FireWall-1 Pass SNA Traffic ?
>
>
>
> Lior...Checkpoint can only pass IP traffic. If you want to get SNA to flow
> through the firewall, you will have to encapsulate the SNA traffic within
> IP.
>
> One of the ways you can do this is to use DLSW on a router. SNA traffic
> hits the router and is encapsulated within IP, flows through the firewall
> to another router that will de-encapsulate the traffic.
>
> Regards.............Elliot
>
> Lior Arbel <[EMAIL PROTECTED]>@lists.us.checkpoint.com on 05/05/2001
> 09:36:37 AM
>
> Please respond to Lior Arbel/Israel/IBM@IBMIL
>
> Sent by: [EMAIL PROTECTED]
>
>
> To: [EMAIL PROTECTED]
> cc:
> Subject: [FW1] Does FireWall-1 Pass SNA Traffic ?
>
>
>
>
> Sorry for the last massage - was sent by mistake
>
> I need help - checkpoint claims that fw-1 pass sna
> traffic but i didnt found any document about it
>
> does anyone tried it before??
>
>
> Lior Arbel
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Auctions - buy the things you want at great prices
> http://auctions.yahoo.com/
>
>
> ============================================================================
> ====
>
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ============================================================================
> ====
>
>
>
>
>
>
> ============================================================================
> ====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ============================================================================
> ====
--
Alexander Hoogerhuis
FYI: perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);'
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
