FireWall-1 Gurus Forum - FireWall-1 Gurus Forum

gartner · gartner

Hi, i configured a NAT. If i now try to connect an internal server over the firewall, it does not work ! * 1.2.3.4 should be NAT'd to 192.168.1.118 * i added an arp entry on the ipso server * on the target server (http) i see that an external address try to connect but it hangs in the state FinWait1...

Anthony · Anthony

I have a requirement to implement address translation between an organisation and their secure gateway provider. This implementation however involves the scenario where a number of class C subnets will preferably be "hidden" (or PAT'ed) with the requirement that some devices (...

HarryBarracuda · HarryBarracuda

We are having problems with any HTTPS site; they simply don't display in the Browser, although HTTP does. This is CKPT NG AI on a Nokia box. We have a virtually identical policy installed on a 4.1 Windows box that works fine. The message appearing in the log is "Reason: Content Security - acc...

nmrbb123 · nmrbb123

Is there any kind of "rule of thumb" out there for sizing a management server. (e.g. # of policy rules + # of NAT rules + # of objects = Sun X) I'm sure there's nothing that magical, but I need something to start with.

ZipferUrtyp · ZipferUrtyp

"http://www.phoneboy.com/bin/view.pl/FAQs/ContiguousSubnetsInEncryptionDo...

Mike · Mike

Hi Gurus! I try to connect via a Bintec VPN Access Router to a partner network. The first Interface of the bintec router is in a DMZ and the second one is in the external network. How I can route the traffic to the partner networks through the bintec? Should I use the OS routing commandos (route add ......

ccseng2002 · ccseng2002

All, I need your help on the following situation: Network A: 172.18.1.0/24 (firewall ip is 172.18.1.254) Network B: 172.17.1.0/24 (firewall ip is 172.17.1.254) Network C: 172.16.1.0/24 (firewall ip is 172.16.1.254) I have three networks separated by a Checkpoint Secureplatfor...

LwTch · LwTch

I've recently installed SecureClient on my WinXP machine which has Pc-Cillin for Virus Protection, and now everytime it tries to update the Virus Signiture, it reboots my computer. Does anyone know if this is a know issue, and if so are there any workarounds? Thanks, LowTch

ZipferUrtyp · ZipferUrtyp

I got 2 internet providers and would like to dedicate specific VPN Tunnels to the second internet line. Some tunnels should be routed all together with the HTTP and EMAIL Traffic via the Firewalls default route. Other tunnel destinations (peer gateways) should use the second internet line by spe...

ZipferUrtyp · ZipferUrtyp

I am very new to NG. We upgraded recently directly from 4.1. We run VPN tunnels to all different kind of peers like Symantec/Velociraptor, Watchguard/Firebox, Cisco, Linux/FreeSWan, Zywall 10, Checkpoint 4.1 and it was a hell of a task to make them all running again on NG in traditional mode. Now I wo...

birmingham · birmingham

Ive got a couple of scenarios i need to consider with meshed and star topologies between some firewalls that have only private links between them and some are connected to the internet. If you put all your firewalls in a mesh do you need physical links between them all or does the firewall automatica...

chods99 · chods99

I'm testing Secure Client AI55 and I noticed that the default policy blocks all windows networking. I want this to happen when I'm connected as part of the VPN but not when I've disconnected. Does anyone have any idea on how to change the default policy of Secure Client? Thanks in a...

ud05555 · ud05555

I am having problems with flapping port errors in a Cisco 4507R switch when connecting three Checkpoint Clusters to it. The Checkpoint clusters are all R55. Any ideas?

Rosa · Rosa

Hi all, I have a problem with Proxy Telnet of Firewall-1. I have Firewall-1 NG R55 AI on Solaris 8. After telnet on firewall and after a successfull authentication, the firewall ask to me the destination host. If I type the Ip Address of the host it's ok, but if I type the DNS name of the host (...

ud05555 · ud05555

Is the NC7170 1000T Nic compatible with Secureplatform R55? Thanks, Robert

Topic		Started By	Replies	Views	Last Post
	NAT / Http (Preview) Hi, i configured a NAT. If i now try to connect an internal server over the firewall, it does not work ! * 1.2.3.4 should be NAT'd to 192.168.1.118 * i added an arp entry on the ipso server * on the target server (http) i see that an external address try to connect but it hangs in the state FinWait1...	gartner	8	767	May 13, 2004 by JA
	NG R55 AI and NAT (Preview) I have a requirement to implement address translation between an organisation and their secure gateway provider. This implementation however involves the scenario where a number of class C subnets will preferably be "hidden" (or PAT'ed) with the requirement that some devices (...	Anthony	1	468	May 12, 2004 by GeoffS
	HTTPS Problems - NG AI on Nokia (Preview) We are having problems with any HTTPS site; they simply don't display in the Browser, although HTTP does. This is CKPT NG AI on a Nokia box. We have a virtually identical policy installed on a 4.1 Windows box that works fine. The message appearing in the log is "Reason: Content Security - acc...	HarryBarracuda	2	444	May 11, 2004 by HarryBarracuda
	Management Server Hardware (Preview) Is there any kind of "rule of thumb" out there for sizing a management server. (e.g. # of policy rules + # of NAT rules + # of objects = Sun X) I'm sure there's nothing that magical, but I need something to start with.	nmrbb123	2	322	May 11, 2004 by ccseng2002
	NG AI R55: ike_use_largest_possible_subnets (Preview) "http://www.phoneboy.com/bin/view.pl/FAQs/ContiguousSubnetsInEncryptionDo...	ZipferUrtyp	1	1608	May 11, 2004 by BillIselin
	VPN over a PPTP Router (Preview) Hi Gurus! I try to connect via a Bintec VPN Access Router to a partner network. The first Interface of the bintec router is in a DMZ and the second one is in the external network. How I can route the traffic to the partner networks through the bintec? Should I use the OS routing commandos (route add ......	Mike	0	271	May 11, 2004 by Mike
	Secureplatform NG-AI R55 and DHCP relay (Preview) All, I need your help on the following situation: Network A: 172.18.1.0/24 (firewall ip is 172.18.1.254) Network B: 172.17.1.0/24 (firewall ip is 172.17.1.254) Network C: 172.16.1.0/24 (firewall ip is 172.16.1.254) I have three networks separated by a Checkpoint Secureplatfor...	ccseng2002	1	452	May 10, 2004 by raulico
	SecureClient & TrendMicro Pc-Cillin (Preview) I've recently installed SecureClient on my WinXP machine which has Pc-Cillin for Virus Protection, and now everytime it tries to update the Virus Signiture, it reboots my computer. Does anyone know if this is a know issue, and if so are there any workarounds? Thanks, LowTch	LwTch	0	290	May 9, 2004 by LwTch
	NG AI R55: Multiple external interfaces (Preview) I got 2 internet providers and would like to dedicate specific VPN Tunnels to the second internet line. Some tunnels should be routed all together with the HTTP and EMAIL Traffic via the Firewalls default route. Other tunnel destinations (peer gateways) should use the second internet line by spe...	ZipferUrtyp	1	342	May 9, 2004 by birmingham
	NG AI R55: VPN Routing in traditional mode (Preview) I am very new to NG. We upgraded recently directly from 4.1. We run VPN tunnels to all different kind of peers like Symantec/Velociraptor, Watchguard/Firebox, Cisco, Linux/FreeSWan, Zywall 10, Checkpoint 4.1 and it was a hell of a task to make them all running again on NG in traditional mode. Now I wo...	ZipferUrtyp	1	421	May 9, 2004 by birmingham
	meshed and star topolgies (Preview) Ive got a couple of scenarios i need to consider with meshed and star topologies between some firewalls that have only private links between them and some are connected to the internet. If you put all your firewalls in a mesh do you need physical links between them all or does the firewall automatica...	birmingham	0	321	May 9, 2004 by birmingham
	Changing the Default Policy (Preview) I'm testing Secure Client AI55 and I noticed that the default policy blocks all windows networking. I want this to happen when I'm connected as part of the VPN but not when I've disconnected. Does anyone have any idea on how to change the default policy of Secure Client? Thanks in a...	chods99	0	271	May 7, 2004 by chods99
	ClusterXL and Cisco (Preview) I am having problems with flapping port errors in a Cisco 4507R switch when connecting three Checkpoint Clusters to it. The Checkpoint clusters are all R55. Any ideas?	ud05555	1	335	May 7, 2004 by msarzina
	Proxy Telnet (Preview) Hi all, I have a problem with Proxy Telnet of Firewall-1. I have Firewall-1 NG R55 AI on Solaris 8. After telnet on firewall and after a successfull authentication, the firewall ask to me the destination host. If I type the Ip Address of the host it's ok, but if I type the DNS name of the host (...	Rosa	0	270	May 7, 2004 by Rosa
	NC7170 NIC and SecurePlatform R55 (Preview) Is the NC7170 1000T Nic compatible with Secureplatform R55? Thanks, Robert	ud05555	1	296	May 5, 2004 by fm2503
«First < 1 … 9 10 11 12 13 … 21 > Last» \| Page of 21 sorted by