A good way to get more of what you are looking for is to go to
policy/properties and set
Apply Gateway rules to interface direction > eitherbound.

One thing to remember is, if this management server controls several remote
fw modules, then the policy will apply to each.

This will inspect the packet against the rulebase upon entry and exit, not
assuming the connections in the connection table are valid. I have seen few
"real" uses for this.

Thomas Poole

-----Original Message-----
From: Shimon Silberschlag [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 04, 2000 5:45 AM
To: Check Point FW List (E-mail)
Subject: [FW1] Rule Base



Can I force to check each and every packet against the rule base and
not the connection table. I know it will hurt the performance of the
fw but I have an obscure need to do it this way. If this can be done,
is this a global setting or can I enable it per rule?

Regards,

Shimon Silberschlag



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to