Yes, we are using the EMC in this fashion now. The problem is that they
don't want for say administrators in Chicago to push the policy out to
Chicago (or vice versa), but to only allow some administrators the right to
push policy out to different firewalls.
Thanks,
Chris
-----Original Message-----
From: Earl Robinson
To: Chris Dodd
Cc: '[EMAIL PROTECTED]'
Sent: 6/7/00 1:09 PM
Subject: Re: [FW1] Is Provider-1 needed for this?
Chris Dodd wrote:
>
> I have a client that wants central management capability from their
main
> office (so that the admins there can administer any other firewall in
the
> network from the Enterprise Management Console). Also, they want the
admins
> from the various sites to be able to make changes to their policies
from the
> gui as well, but NOT be able to push policy down to other
firewalls/vpns
> managed by the management console.
nope, just an EMC. What you can do is define 1 policy, and push it to
several different firewalls.
Provider 1 essentially lets you aggregate several separate EMC groups
into one console.
--
Earl Robinson
Network Security Analyst
SeNet International Corp
[EMAIL PROTECTED]
===============================================================
In God we Trust -- all others must submit an X.509 certificate.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
