Re: [FW-1] user authentication with HTTPS

Hello I made this changes and unfortunatly it doesn't work. I tried with User Auth and Client Auth, clean https and https with resource. The browser was set up like You said. I tried to configure https-resource (match:*:443) and the browser was set to security port 443. I can find anything else

Re: [FW-1] Time format in FW LOG

Partha, Check the Check Point SmartCenter Guide, in the FP3 version on pg 595 you have the various formats that you can use, unless they have made some mistakes you could use : DD-mon- 31-jan-2003 mon DD, Jan 31, 2003 MM/DD/

Re: [FW-1] User login expiry

If it's the firewall database then you can edit each user and change the expiry date. If you have many users, checkpoint has also a tool that can change the expiry date for all the users. I'm not sure if this is available for NG. If it's not an authentication problem (user can successfully

[FW-1] AW: [FW-1] Suggestions for creating a manageable firewall policy

Since it is only four hosts you might want to consider setting up your rulebase as follows: SRC GROUP(4 HOSTS)DST(ALL SYSTEMS AND DESTINATIONS YOU DO NEVER WANT TO BE ACCESED BY THIS GROUP)SERVICE(ANY)ACTION(DENY) SRC GROUP(4 HOSTS)DST(ANY)SERVICE(PUT TOGETHER A PORTLIST OF KNOWN

[FW-1] AW: [FW-1] SMTP Rule - 4.1 and NG FP3

Hello, of course you can configure your Check Point FireWall as MTA. DNS does not handle this issues (SPAM), professional MTAs like MIMESweeper, sendmail or qMail behind your firewall do. I.e. in sendmail you just have to enter OURDOMAIN into the acces.db. I personally prefer having a single

[FW-1] ufsdump or cpio to backup solaris + firewall

Hi Does anyone know which is better for backups of a checkpoint firewall module running solaris 2.6 usfdump or cpio. and why This E-mail transmission may contain confidential or legally privileged information that is intended for the addressee only. E-mail communications are not necessarily

Re: [FW-1] route problem in ClusterXL

Well... Now I've ignored CP manual and I've moved external interfaces to the public networks. It's ok, but even so I'd like to know how it could be done with CP specifications... regards jim parker wrote: Yeah I've been wondering the same thing, if youset its own external interface as its own

[FW-1] FTP

Does anyone knows a FTP client for windows 2000with the following characteristics: - Work on command prompt - Permitt scripting - Work in passive mode - Shows a transfer progress bar or indicator Thanks, Ricardo Manuel Agostinho Marques e-Security Consultant UNISYS Sistemas de

Re: [FW-1] Secureplatform/Firwall-1 NG/Adaptec quad?

I had the same experience with Red Hat 7.2 and the Adapteq quad card with the starfire driver. I started a case with checkpoint and they finally admitted that it was a bug and it was fixed in FP3-HF1. -Original Message- From: David Gillett [mailto:[EMAIL PROTECTED]] Sent: 28. janúar

[FW-1] Vijay - network objects

Hi, I am new to checkpoint, and working of CheckPoint 2000 Firewall-1 currently. Can anyone tell me how to create network objects ? I am trying to set up policies and having some problems in the above matter. I have three network cards - one for Internal network, one for DM and the thrid one

[FW-1] How to recover a policy

Hi. I have the following schema: Checkpoint FW-1 4.1 SP2 Management console - windows NT. Enforcement modules: Nokia IP440 x 3. I suffered an outage (lightning)and I had to reinstall the Windows NT from scratch. I need to recover the policy from the firewalls. Is there any process to do that?

[FW-1] http redirect

Greetings NG FP1 Anywebserver.http/resourceaccept Connection methods are transparent and proxy. match: host = website.domain.com action= replace with http://www.yahoo.com my problem is when it redirects I get this : Error FW-1 at cplocdown: Access denied The logs:

[FW-1] Nokia IP440 Firewall Upgrade to SP6

Does anyone have a good document that details what steps you should follow for upgrading a Nokia firewall to SP6? I am currently running IPSO 3.3-FCS3 Firewall-1 v4.1 SP3. Thanks, Sean P. Donaghey Sr. Technical Analyst Hôtel-Dieu Grace Hospital Windsor, Ontario Canada Tel:(519) 973-4411 Ext.

Re: [FW-1] AW: [FW-1] SMTP Rule - 4.1 and NG FP3

We block mail relaying at our SMTP gateway. So does having fw-1 check the destination domain have any value-added features? Is it another layer of defence, or a waste of fw-1 resources? -Original Message- From: Joerg Fritsch [mailto:[EMAIL PROTECTED]] Sent: January 31, 2003 6:13 AM

Re: [FW-1] ufsdump or cpio to backup solaris + firewall

Hi Tar is quite reliable and scriptable and it's what I would use but if you're set on using ufsdump or cpio, I would say cpio or ufsdump/ufsrestore would be much the same. ufsrestore is good for interactive restores if you're interested. Ufsdump is supposed top be more reliable but I

Re: [FW-1] FTP

Marques, Ricardo wrote: Does anyone knows a FTP client for windows 2000 with the following characteristics: - Work on command prompt - Permitt scripting - Work in passive mode - Shows a transfer progress bar or indicator If you only need to receive: WGET e.g. from UnxUtils

Re: [FW-1] Vijay - network objects

The PDF's are a great place to start. They are located on the FW-1 CD. Nick -Original Message- From: Vijay Kumar [mailto:[EMAIL PROTECTED]] Sent: Friday, January 31, 2003 7:59 AM To: [EMAIL PROTECTED] Subject: [FW-1] Vijay - network objects Hi, I am new to checkpoint, and working of

Re: [FW-1] FTP

wcl_ftp meets two of your criteria, command line and scripting. I'm not sure about the other two [EMAIL PROTECTED] 01/31/03 06:42AM Does anyone knows a FTP client for windows 2000 with the following characteristics: - Work on command prompt - Permitt scripting - Work in passive mode - Shows

Re: [FW-1] User login expiry

Checkpoint support has sent me information about the expiry date change tool, so once I get back to having a functional management station, I can fix the original problem. DG -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED]]On Behalf Of

Re: [FW-1] ufsdump or cpio to backup solaris + firewall

Robert Fowler wrote: Hi Does anyone know which is better for backups of a checkpoint firewall module running solaris 2.6 usfdump or cpio. and why ^^ Most people will say ufsdump is better than cpio/tar. A ufsdump looks at the raw disk device and gets _everything._ ufsdump handles all

[FW-1] Log file question

Title: Secure-Remote DNS Does anyone know if it's necessary to keep 0 byte length .alog files on the system? Are .alog files used as an index? I'm on Checkpoint VPN-1 Ver. 4.1 I can't find any info on this at Checkpoint's web site or at phoneboy's. Thank you, Moss

Re: [FW-1] AW: [FW-1] SMTP Rule - 4.1 and NG FP3

Christopher Collins wrote: We block mail relaying at our SMTP gateway. So does having fw-1 check the destination domain have any value-added features? Is it another layer of defence, or a waste of fw-1 resources? It is another layer of defense, and it actually uses less firewall resources. If

Re: [FW-1] Win XP - SecuRemote - Outlook - SLOW!!!

Thanks Jim! You made the call (MTU Fragmentation). XP didn't even have the registry setting for the MTU. Once inserted and rebooted, Outlook came up like a champ. I did finally uncover an article in MS's KB Outlook/Outlook express stop responding after sending attachments. - Jeff

[FW-1] Darren Lewis is out of the office.

I will be out of the office starting 31/01/2003 and will not return until 10/02/2003. If you mail is urgent, please mail [EMAIL PROTECTED], otherwise I will respond to your message promptly on my return. Kind regards Darren Lewis Kiss Technologies

[FW-1] Why doesn't checkpoint FW-1 4.1 bring up the vpn from its side

We have several telecommuters that use Linksys BEFVP41 boxes as VPN gateways to our firewall from their broadband links, and in general we like them as cost effective and work well, but there is one thing I can't seem to figure out (ok, at least 1)... Anyway why can the link be brought up (key

[FW-1] regarding RULES....

hi there, i just inherited (as of late last night) vpn-1 firewall-1 v4.0 which is running on nt4.0 svr i have some basic question about the security rules and procedure...please bare with me while i weed through it. 1. when you create/apply new rules does it take in effect right away or

Re: [FW-1] Vijay - network objects

Greetings! Vijay Kumar wrote: I am new to checkpoint, and working of CheckPoint 2000 Firewall-1 currently. Can anyone tell me how to create network objects ? Whoops - so you're missing even the very basics. As I wrote before (here? another list?), managing a a firewall is like slinging a

[FW-1] AW: [FW-1] AW: [FW-1] SMTP Rule - 4.1 and NG FP3

It depends what your mailgateway is. It is always a bad idea placing the plattform carrying your mailstore or other sensitive information in the DMZ and publishing it via MX RRs without at least doing any SMTP-protocol checks. If your mailgateway is a mailrelay like MIMESweeper you do not need

Re: [FW-1] Log file question

Accounting logs. If you're not accounting in your policies then you can safely remove them. Chris On Fri, 31 Jan 2003, Brad Moss wrote: Date: Fri, 31 Jan 2003 11:20:19 -0600 From: Brad Moss [EMAIL PROTECTED] Reply-To: Mailing list for discussion of Firewall-1 [EMAIL PROTECTED] To:

Re: [FW-1] VPN between CP NG FP2 and Nokia IP30

You'll either have to do traditional mode, extract certs or move to fp3. managing the ip30s with the fp3 management console + SSC (SofaWare SmartCenter Connector) is a breeze. You still have to manually define your vpn policy on the ip30 side of things, but it's not too bad. where can I get

Re: [FW-1] TCP Packet out of state messages

IMHO, you shouldn't select that option. It will enable fw-1 to forward (out of state) packets according to the rulebase. That means a new connection does not have to be setup by a 3-way tcp handshake just an ACK bit set is ok to allow the connection. Laidlaw, Rob [EMAIL PROTECTED] wrote: The

[FW-1] LDAP-Account module question

Title: Message Hi All, I am trying to get the account moduleto workwith AD and this is completely new to me. I have a printout from checkpoint which discusses how to do it. Unfortunately, I am running a stand alone VIGand the instructions cover the scenario where you have a management

Re: [FW-1] Log file question

Brad Moss wrote: Does anyone know if it's necessary to keep 0 byte length .alog files on the system? Are .alog files used as an index? I'm on Checkpoint VPN-1 Ver. 4.1 I can't find any info on this at Checkpoint's web site or at phoneboy's. It may not be safe to remove them while the

Re: [FW-1] SmartDefense

Click on SmartDefense and setup a larger packet size for ICMP packets. Regards, Egonle Mark Quigley [EMAIL PROTECTED] wrote: Do you have Accept ICMP Requests selected in Global Properties? Also, SmartDefense and Global Property rules take affect no matter what you define in your rulebase (for

Re: [FW-1] Policy server LOG OFF

Kolarík Michal [EMAIL PROTECTED] wrote: Hi all, Is there any way how to left on desktop another policy than default, when I am disconnected from policy server? Not, that I'm aware of. I filled in the RFE form on Checkpoint website - but did not get any reply. How about anybody who's looking

[FW-1] secure Outlook Web Access with Checkpoint?

Hi, I have to integrate OWA frontend into a public DMZ. As users use their domain accounts to get e-mail (using OWA) we are concered about DoS attack which lock out any user of the company. So I would like to restrict access to the OWA login windows itself. What did people setup for that? I

Re: [FW-1] regarding RULES....

hi there, i just inherited (as of late last night) vpn-1 firewall-1 v4.0 which is running on nt4.0 svr Oh my. I am SO sorry. ;) i have some basic question about the security rules and procedure...please bare with me while i weed through it. Bare with you? Now you are going

Re: [FW-1] FTP

ncftp. It's included in cygwin. Lars -Original Message-From: Marques, Ricardo [mailto:[EMAIL PROTECTED]]Sent: Friday, January 31, 2003 13:43To: [EMAIL PROTECTED]Subject: [FW-1] FTP Does anyone knows a FTP client for windows 2000with the following

Re: [FW-1] regarding RULES....

hi there, sorry about the typos belowwas running low on caffeine ;-) see comments in-line: -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED]]On Behalf Of Hal Dorsman Sent: Friday, January 31, 2003 2:38 PM To: [EMAIL PROTECTED] Subject: Re: