George. Don't put anything on the SYNC network that is not a Checkpoint device. Policy instection on that interface is treated differently as it is by definition secured and therefore Checkpoint only.
If you don't have another spare interface on the FW's you could enable VLANS on one of your DMZ interfaces instead (OS dependent)... Kind Regards, Jon Paine. Support Development Specialist. Allasso European Support Centre. SMTP - mailto:[EMAIL PROTECTED] WEB - http://support.allasso.com Tel. 0870 366 8533 (+44 118 971 1533) Fax. 0870 366 8544 (+44 118 971 1544) PGP Fingerprint: ADD3 07AC ED47 292A BF61 E124 E81F 9249 7AD9 6E0C -----Original Message----- From: Didea, Gheorghe [mailto:[EMAIL PROTECTED] Sent: 12 March 2003 17:47 To: Issforum (E-mail) Subject: [ISSForum] Checkpoint and network sensor Hello, I have a cluster Checkpoint NG and 3 DMZ in this cluster. One is for cluster sync (with antispoofing) and I want to install my internal NS interface here. Can I do it or I need another DMZ without antispoofing? Thanks George Please note that: 1. This e-mail may constitute privileged information. If you are not the intended recipient, you have received this confidential email and any attachments transmitted with it in error and you must not disclose, copy, circulate or in any other way use or rely on this information. 2. E-mails to and from the company are monitored for operational reasons and in accordance with lawful business practices. 3. The contents of this email are those of the individual and do not necessarily represent the views of the company. 4. The company does not conclude contracts by email and all negotiations are subject to contract. 5. The company accepts no responsibility once an e-mail and any attachments is sent. Allasso Ltd Theale House, Brunel Road, Theale, Berkshire RG7 4AQ UK T: +44 118 971 1511 F: +44 118 971 1522 _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
