FireWall-1 Gurus Forum - FireWall-1 Gurus Forum

marj · marj

Hi All I would just like to know if anyone has successfully configured FW1-NG-FP2 to authenticate secure client users against Microsoft Active Directory. I am not looking to deploy this with full LDAP Account Unit Management but would just like to use MS AD as an externally managed user database....

Lermure · Lermure

Hi,I need some help on a problem with Anti-spoofing feature. I have a Checkpoint VPN module, with two NIC cards. One card is connected to a DMZ and the other is connected to a internal network. Because the internal network AND Internet (External) can acces...

raulico · raulico

Hi Guys, i've installed hotfix accumulator and fw ver -k gives me this output: This is Check Point VPN-1(TM) & FireWall-1(R) NG with Application Intelligence (R55) - Build 121kernel: NG with Application Intelligence (R55) - Build 121 while the pdf says another version of buil...

smay23 · smay23

Hi, I need some help with configuring anti spoofing on an internet facing interface within a checkpoint NG cluster. When I configure anti spoofing on the internet facing interface, checkpoint comes back with an error saying that I need to configure topology information for another (non-inte...

XJSC · XJSC

Hi, We are using SecureClient NG AI. I want SecureClient to start at all times except when I am connecting to a specific network. Is there a configuration I can set to exclude a network range?? Thanks

lickherlandcom · lickherlandcom

Hi, I am wanting to use MetaIP to assign DHCP addresses on a site we are using for a conference, the reason I want to use MetaIP is mainly for authentication. I already have a FW-1 NGAI machine running which will be used to firewall off this new DSL link, what I would like to do is have my firewall as...

Alex Brown · Alex Brown

We have FW-1 NG on Nokia IPSO. The limit has been increased to 50000 but we are still running out of NAT addresses. What is causing this and will reducing the TCP timeout help if the cause is current sessions not ending correctly? Where/how do we look to see what IP addresses are bein...

richiemarshall · richiemarshall

Hello, I've taken over a site that is running a single NG FP-2 firewall that was built in 2002. Unfortunatly the administrator that installed the Firewall misplaced all of the installation media. The firewall is running without issue, but I have no GUI workstation to control it with, and no way o...

Zombie · Zombie

I have next messages in Event log when my Checkpoint Firewall NG AI (R54) started. 1. The description for Event ID ( 1 ) in Source ( FireWall-1 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The fol...

cosmicv · cosmicv

Anyone have any directions, tips, or resources on migrating a stand alone checkpoint to a distributed setup? Thanks!

shaulbe · shaulbe

Hi, I have a 2 fw-1 , 1 with the enforsment and the managment modul and 1 winth the enforsment module . The SIC is Initialize and the Trust established but when i Install policy on the enfoesment module i have a error "Reason: Connection aborted by Peer ( port = 18191 )( IP = x....

Alex Brown · Alex Brown

We have FW-1 NG on Nokia IPSO. The limit has been increased to 50000 but we are still running out of NAT addresses. What is causing this and will reducing the TCP timeout help if the cause is current sessions not ending correctly? Where/how do we look to see what IP addresses are bein...

jbowman · jbowman

Using Voyager to create weekly backups and having trouble with the FTP script. It seems IPSO 3.7 does not honor a "cd" prior to a "put". "Put" tries to take the origin path and drop the file in the same destination path rather than the directory I just "cd'd" to. e.g. /var/admin/s...

dprakken · dprakken

Trying to help a client get his checkpoint vpn users through a PIX firewall. No nat'ing on the pix, access-lists allow esp and isakmp passthrough. Any thing else you can think of? Thanks

jbowman · jbowman

Where's Nokia going with this feature, and why would they suggest we don't want to implement it?

Topic		Started By	Replies	Views	Last Post
	Fw1 authenticating against MS AD (Preview) Hi All I would just like to know if anyone has successfully configured FW1-NG-FP2 to authenticate secure client users against Microsoft Active Directory. I am not looking to deploy this with full LDAP Account Unit Management but would just like to use MS AD as an externally managed user database....	marj	1	390	Mar 8, 2004 by cosmicv
	External and Anti-Spoofing problem (Preview) Hi,I need some help on a problem with Anti-spoofing feature. I have a Checkpoint VPN module, with two NIC cards. One card is connected to a DMZ and the other is connected to a internal network. Because the internal network AND Internet (External) can acces...	Lermure	0	325	Mar 8, 2004 by Lermure
	Hotfix Accumulator (Preview) Hi Guys, i've installed hotfix accumulator and fw ver -k gives me this output: This is Check Point VPN-1(TM) & FireWall-1(R) NG with Application Intelligence (R55) - Build 121kernel: NG with Application Intelligence (R55) - Build 121 while the pdf says another version of buil...	raulico	4	797	Mar 5, 2004 by raulico
	NG Cluster Antispoofing (Preview) Hi, I need some help with configuring anti spoofing on an internet facing interface within a checkpoint NG cluster. When I configure anti spoofing on the internet facing interface, checkpoint comes back with an error saying that I need to configure topology information for another (non-inte...	smay23	2	658	Mar 4, 2004 by smay23
	Excluded networks (SecureClient) (Preview) Hi, We are using SecureClient NG AI. I want SecureClient to start at all times except when I am connecting to a specific network. Is there a configuration I can set to exclude a network range?? Thanks	XJSC	1	572	Mar 4, 2004 by cosmicv
	Meta IP (Preview) Hi, I am wanting to use MetaIP to assign DHCP addresses on a site we are using for a conference, the reason I want to use MetaIP is mainly for authentication. I already have a FW-1 NGAI machine running which will be used to firewall off this new DSL link, what I would like to do is have my firewall as...	lickherlandcom	1	341	Mar 4, 2004 by nox
	NAT Table Fills up (Preview) We have FW-1 NG on Nokia IPSO. The limit has been increased to 50000 but we are still running out of NAT addresses. What is causing this and will reducing the TCP timeout help if the cause is current sessions not ending correctly? Where/how do we look to see what IP addresses are bein...	Alex Brown	2	648	Mar 3, 2004 by cosmicv
	Firewall-1 NG FP-2 install media (Preview) Hello, I've taken over a site that is running a single NG FP-2 firewall that was built in 2002. Unfortunatly the administrator that installed the Firewall misplaced all of the installation media. The firewall is running without issue, but I have no GUI workstation to control it with, and no way o...	richiemarshall	1	526	Mar 3, 2004 by ccseng2002
	Fetching DT Security Policy from management failed (Preview) I have next messages in Event log when my Checkpoint Firewall NG AI (R54) started. 1. The description for Event ID ( 1 ) in Source ( FireWall-1 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The fol...	Zombie	1	679	Mar 3, 2004 by nox
	Stand-alone to distributed (Preview) Anyone have any directions, tips, or resources on migrating a stand alone checkpoint to a distributed setup? Thanks!	cosmicv	1	577	Mar 3, 2004 by nox
	Reason: Connection aborted by Peer ( port = 18191 (Preview) Hi, I have a 2 fw-1 , 1 with the enforsment and the managment modul and 1 winth the enforsment module . The SIC is Initialize and the Trust established but when i Install policy on the enfoesment module i have a error "Reason: Connection aborted by Peer ( port = 18191 )( IP = x....	shaulbe	1	23359	Mar 3, 2004 by nox
	NAT Table Fills up (Preview) We have FW-1 NG on Nokia IPSO. The limit has been increased to 50000 but we are still running out of NAT addresses. What is causing this and will reducing the TCP timeout help if the cause is current sessions not ending correctly? Where/how do we look to see what IP addresses are bein...	Alex Brown	0	467	Mar 2, 2004 by Alex Brown
	FTP / SFTP of Backups (Preview) Using Voyager to create weekly backups and having trouble with the FTP script. It seems IPSO 3.7 does not honor a "cd" prior to a "put". "Put" tries to take the origin path and drop the file in the same destination path rather than the directory I just "cd'd" to. e.g. /var/admin/s...	jbowman	1	616	Mar 1, 2004 by ccseng2002
	CP VPN through a PIX FW (Preview) Trying to help a client get his checkpoint vpn users through a PIX firewall. No nat'ing on the pix, access-lists allow esp and isakmp passthrough. Any thing else you can think of? Thanks	dprakken	1	550	Feb 29, 2004 by ccseng2002
	Simplified VRRP vs. Legacy VRRP (Preview) Where's Nokia going with this feature, and why would they suggest we don't want to implement it?	jbowman	1	1543	Feb 29, 2004 by ccseng2002
«First < 1 … 17 18 19 20 21 > Last» \| Page of 21 sorted by