Yes, because all traffic between SecuRemote and the Firewall travels
through an encrypted tunnel. Therefore your packet to the illegal is
traveling through the tunnel so it is encapsulated.
Misha wrote:
>Is it technically possible to access a machine with an illegal non-routeable
>ip address
Not sure if this got through the first time - apologies if this is a
repeat!
For those who are interested, have tried this combination before,
or are looking at doing so - this may be helpful
Infact, what I will share here is probably applicable to other
applications that behave in the same
Security Policy ->Routing ---> then NAT
Roy Culley wrote:
>"Shah, Nishith" <[EMAIL PROTECTED]> wroye:
>
>>Always NAT first.
>>
>
>Not according to phoneboy's FAQ or my experience. Routing is
>done first and then NAT.
>
>>A CCSA question.
>>
>
>You failed. :-)
>
>>-Original Message-
Rick,
I think when you use automatic address translation it would do the address
translation
before making the routing decision because the NAT information is contained
in the
object properties i.e. with the security rules.
George
-Original Message-
From: Rick McMaster [mailto:[EMAI
Most
of the Checkpoint manuals talk about SecuRemote when used to a combined
management station/Firewall.
I want
to use SecuRemote to establish a VPN to a Firewall only module. The mangamnet
station for this module is hidden back on the LAN. Is it possible? Is there
anyway to make a Fir
Title: RE: [FW1] Firewall-1 on Redhat 6.2
What Linux kernel are you running? FireWall-1 is not yet supported on 2.4.X kernels, only 2.2.X.
-Vince
-Original Message-
From: Tomomi Furukubo
To: [EMAIL PROTECTED]
Sent: 6/21/01 4:41 AM
Subject: [FW1] Firewall-1 on Redhat 6.2
Hi all
Hi There,
I'm using the secure Remote client version 4185 and trying to connect to my
firewall using DSL. The DSL router is setup to do many to many translate.
Each time I tried to connect to the firewall it fails. However, I was able
to download the topology. I know that previous version of Se
If you require a publicly available system, I can't think of any reason NOT
to use a DMZ. But...
The main reason for a DMZ (and perhaps the biggest advantage) is protection
of the LAN and local domains via network-layer segregation. This is a great
improvement over a typical (slack) setup, in
Two
things:
1) An
upgrade to SP4 wouldn't hurt, as some aspcects of Hybrid IKE requires
that.
2)
Mine didn't show up until I rebooted the box.
Maybe
this helps?
-ian
-Original Message-From: David Bazillio
[mailto:[EMAIL PROTECTED]]Sent: June 20, 2001 9:17
AMTo:
The
problem is not in your firewall. This is an issue with your SMTP
server. It is rejecting SMTP connections from outside your domain, unless
the E-mail is meant for your domin. This is done to prevent your server
from being used as a sapm relay.
David
Hoobler
-Original Messa
Title: RE: [FW1] Truncated columns in log viewer (4.0 build 4303 on Windows NT 4.0 SP4)
The problem occurs only when SP8 is applied. Removing SP8 restores proper
logging (the base FW1 installation is build 4031).
Curiously, I can temporarily work around the bug by doing an "fw logswitch",
"
Always remember that routing occurs before translation..
Rick McMaster, CISSP
Director, Security Engineering
Secure+
ePlus Technology
mailto:[EMAIL PROTECTED]
http://www.eplus.com
Nasdaq: PLUS
This message may contain confidential and/or proprietary information, and is
intended only for
If it is a win2k machine, none of the above. Here is a synopsis of the
explanation on Microsoft's site:
One port for the Active Directory logon and directory replication interface
(universally unique identifiers [UUIDs] 12345678-1234-abcd-ef00-01234567cffb
and e3514235-4b06-11d1-ab04-00c04fc2dc
Hey folks,
I will try to keep this short. We are using three firewalls with the same
policy at one of my sites. One of them is a FW-1 VPN-1 firewall with
connections to two other sites as well as for allowing Securemote access.
When those sites were set up, to facilitate progress, the "Accept
We have the following topology:
LAN
SWITCH--FW-1-CISCO3620
NO DMZ.
where should I install the network sensors and OS
sensors?
Thanks
Need Help on hardware/OS& firewall version upgrade...
Current version of FW-1 ( Single Gateway) 3.0B running on Windows NT 4.0
Need to upgrade to fw-1 4.1 with VPN capability on new hardware running
on Windows 2000
Server.
i would appreciate, any easiest and reliable step by step migration p
I have am running a fw with 3des feature tried to SSH from my workstation to a
box on the net. On the workstation, I get to the FATAL: Connecting to ip
failed: Connection Refused.
On the fw logs the fw ethernet was replaced with 'daemon' and all packets were
being rejected through the fw unde
Hi,
unfortunately I don't have a solution for your problem, but I made the same
experience!
Greets,
Andreas
-Original Message-
From: Elaine Lolos [mailto:[EMAIL PROTECTED]]
Sent: Mittwoch, 20. Juni 2001 16:48
To: [EMAIL PROTECTED]
Subject: [FW1] SecuRemote sending email relay problem
Got a problem thats making me Crazy!! Not sure if it behavior by design or
user error.
FW-1 machine with 3 nic interfaces
1. external to the internet (external IP)
2. DMZ (192.168.0.x)
3. LAN (192.168.1.x)
Natting the external IP's to several diff Internal webservers and IP's in
the DMZ
19 matches
Mail list logo
