Hello, I have just sat the CCSA NG exam, and failed (63%)! One of the questions I had difficulty with was the following.
If you have disabled the 'Accept VPN-1 & Firewall-1 Control Connections' in the Implied rules section of Global Properties, how can you re-enable communications between VPN-1/Firewall-1 daemons? According to the manual/help, if you disble this option, you must explicitly allow these connections in the rule base. My understanding of this procedure is that if you disable Control Connections, and do not explicitly implement these rules, you will no longer be able to communicate between the Policy Editor and Management Server. Therefore preventing you from modifying the security policy and re-enabling the Control Connections. Is there a command line option, a file that can be edited on the Management Server, or some other way of resolving this? Thanks, Martin. ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
