FireWall-1 Gurus Forum - FireWall-1 Gurus Forum

a55mnky · a55mnky

I am working with a client who has a FW-1 NG configured with 1100+ NAT rules and 1400+ access rules. They have done extensive testing to verify whether the number of rules which they have implemented has a perfomance impact - it seems not to- but I am trying to explain to them that sheer number of rules lea...

richardu · richardu

Hi! I'm having huge problems connecting a remote office to our main office via Securemote and FW-1. Remote office uses a D-link 804 router/firewall with NAT (Using 192.168 etc. inside). The problem is, that if one user connects and authenticates via Securemote (IKE) it will work perfectly.Bu...

bmonday · bmonday

I bought an IP440 on eBay recently and I'm trying to reset the admin password. It's running IPSO 3.4.1 I get to the Boot: prompt. but it doesn't seem to allow any input there. I have tried 3 different terminal emulators, including SecureCRT, but I can't type the "-s" when I am supposed to...

dimwit · dimwit

Anyone know of any good papers on SmartDefense. We have no inbound connections other than SMTP and Site to Site and Client to Site VPN. How can I get it to earn its money ?

dalessad · dalessad

I have a Nokia RL50 Appliance that is about 3.5 years old, and sooner or later the HD is going to fail. This appliance has 3 NICs, 1 serial, and 1 console port, no floppy. I have an IPSO boot disk, IPSO gzipped on a CD and checkpoitn 4.1 on a CD. If i were to replace the failed hard drive, how would I get th...

sulfig · sulfig

Hello, currently I'm involved in some test cases that should verify Nokia IP1260/CheckPoint NG AI R54 performance. Unfortunately I'll have to set up a rulebase with 5000 different entries for one of my tests. I'm not too lucky with my attempts right now. I've created a rule base with 50...

bassoctopus · bassoctopus

I'm trying to set up VPNs with our Cisco PIXs around Europe which currently work on our FW1 4.1 box. I'm not having much success and have found Phoneboy's hotfix recommendation in his book. I can't seem to find the hotfix on Checkpoint's site anymore, is that because it's part of the R55 update? ...

eduinoue · eduinoue

Hi, I am configuring a SecuRemote in a fw1 NG fp2 using a MS Radius (IAS) of windows 2000 to authenticate the users. My problem is that between the checkpoint and the MS radius only "pap" authentication is working. And this is bad because pap is cleartext. Anybody know how to change the authenticatio...

dommy2004 · dommy2004

I have a wierd problem using CP on a W2k box to connect to work. The CP verifies me OK and I can access Outlook and at least part of the company intranet but I can't mount any remote shares. I can ping the remote box with the share OK and the remote DNS recognises machine names correctly. To...

ueli · ueli

How can I start a correct batchfile ? I tried: at 12:00 cmd /cpstart but it does not execute the cmd .

dooleys · dooleys

i have problems with my clients handling nt4 network shares in write mode, when you write on a network share, it writes corrupt data

furbit · furbit

All, When I made the Standby console Active, I had the option to sync the rules before I made it active. Now that I want to make the original Master the activve one again, I do not have the option to synch the rules before I make it Active. Can anyone provide some insight as to what my i...

Huge · Huge

Firewall down console message states the following vm_fault: pager input (probably hardware) error, PID 318 failure swap_pager: I/O error - pagein failed; blkno 25544, size 4096, error 22 What has caused this error

After hard reboot all is ok

edi · edi

Can anyboby explain me what do I need to get NokiaIP40 box work with CP NG FP3 build 53225. CP R55 version already support VPNedge object, like Nokia IP40 but FP3 does not. Do I need to upgrade... Thank's!

tordofm · tordofm

Hi, I have a problem with excessive https sessions to our webserver from different source IP's. Because the source keeps changing is it possible to apply a global setting limiting https connection within a certain time period? I have been able to alert on this by using smartdefense but not protect...

Topic		Started By	Replies	Views	Last Post
	Rulebase size (Preview) I am working with a client who has a FW-1 NG configured with 1100+ NAT rules and 1400+ access rules. They have done extensive testing to verify whether the number of rules which they have implemented has a perfomance impact - it seems not to- but I am trying to explain to them that sheer number of rules lea...	a55mnky	0	314	Mar 22, 2004 by a55mnky
	FW-1 4.1 SP5 and securemote to remote office. (Preview) Hi! I'm having huge problems connecting a remote office to our main office via Securemote and FW-1. Remote office uses a D-link 804 router/firewall with NAT (Using 192.168 etc. inside). The problem is, that if one user connects and authenticates via Securemote (IKE) it will work perfectly.Bu...	richardu	1	324	Mar 22, 2004 by ccseng2002
	Resetting Admin Password on IP440 (Preview) I bought an IP440 on eBay recently and I'm trying to reset the admin password. It's running IPSO 3.4.1 I get to the Boot: prompt. but it doesn't seem to allow any input there. I have tried 3 different terminal emulators, including SecureCRT, but I can't type the "-s" when I am supposed to...	bmonday	8	441	Mar 19, 2004 by bmonday
	SmartDefense FP3 & AI (Preview) Anyone know of any good papers on SmartDefense. We have no inbound connections other than SMTP and Site to Site and Client to Site VPN. How can I get it to earn its money ?	dimwit	1	367	Mar 19, 2004 by ccseng2002
	Installing a new HD on a Nokia RL50 with no floppy (Preview) I have a Nokia RL50 Appliance that is about 3.5 years old, and sooner or later the HD is going to fail. This appliance has 3 NICs, 1 serial, and 1 console port, no floppy. I have an IPSO boot disk, IPSO gzipped on a CD and checkpoitn 4.1 on a CD. If i were to replace the failed hard drive, how would I get th...	dalessad	0	664	Mar 19, 2004 by dalessad
	how to generate a large rule base for testing (Preview) Hello, currently I'm involved in some test cases that should verify Nokia IP1260/CheckPoint NG AI R54 performance. Unfortunately I'll have to set up a rulebase with 5000 different entries for one of my tests. I'm not too lucky with my attempts right now. I've created a rule base with 50...	sulfig	2	391	Mar 18, 2004 by sulfig
	PIX VPN Hotfix (Preview) I'm trying to set up VPNs with our Cisco PIXs around Europe which currently work on our FW1 4.1 box. I'm not having much success and have found Phoneboy's hotfix recommendation in his book. I can't seem to find the hotfix on Checkpoint's site anymore, is that because it's part of the R55 update? ...	bassoctopus	6	431	Mar 17, 2004 by bassoctopus
	Problem to authenticate in a MS Radius (IAS) (Preview) Hi, I am configuring a SecuRemote in a fw1 NG fp2 using a MS Radius (IAS) of windows 2000 to authenticate the users. My problem is that between the checkpoint and the MS radius only "pap" authentication is working. And this is bad because pap is cleartext. Anybody know how to change the authenticatio...	eduinoue	1	342	Mar 16, 2004 by ccseng2002
	CP and WebExcel ADSL modem (Preview) I have a wierd problem using CP on a W2k box to connect to work. The CP verifies me OK and I can access Outlook and at least part of the company intranet but I can't mount any remote shares. I can ping the remote box with the share OK and the remote DNS recognises machine names correctly. To...	dommy2004	0	254	Mar 16, 2004 by dommy2004
	w2k batchfile (Preview) How can I start a correct batchfile ? I tried: at 12:00 cmd /cpstart but it does not execute the cmd .	ueli	1	318	Mar 16, 2004 by dommy2004
	problems with network share fw-1 (Preview) i have problems with my clients handling nt4 network shares in write mode, when you write on a network share, it writes corrupt data	dooleys	0	290	Mar 15, 2004 by dooleys
	Rephrased: Mgmt Console Synch Help (Preview) All, When I made the Standby console Active, I had the option to sync the rules before I made it active. Now that I want to make the original Master the activve one again, I do not have the option to synch the rules before I make it Active. Can anyone provide some insight as to what my i...	furbit	0	263	Mar 15, 2004 by furbit
	vm_fault (Preview) Firewall down console message states the following vm_fault: pager input (probably hardware) error, PID 318 failure swap_pager: I/O error - pagein failed; blkno 25544, size 4096, error 22 What has caused this error After hard reboot all is ok	Huge	0	273	Mar 15, 2004 by Huge
	NokiaIP40 + NGFP3 (Preview) Can anyboby explain me what do I need to get NokiaIP40 box work with CP NG FP3 build 53225. CP R55 version already support VPNedge object, like Nokia IP40 but FP3 does not. Do I need to upgrade... Thank's!	edi	0	306	Mar 15, 2004 by edi
	Limit https connections to web server (Preview) Hi, I have a problem with excessive https sessions to our webserver from different source IP's. Because the source keeps changing is it possible to apply a global setting limiting https connection within a certain time period? I have been able to alert on this by using smartdefense but not protect...	tordofm	2	374	Mar 15, 2004 by tordofm
«First < 1 … 15 16 17 18 19 … 21 > Last» \| Page of 21 sorted by