FireWall-1 Gurus Forum - FireWall-1 Gurus Forum

abeck · abeck

Does anyone know where one can download an .iso of secureplatform? Its frustrating that its not readily available on CP's usercenter (or in general).. or at least, not easily locatable

.

jdewet · jdewet

I hope there is someone out there that can help me with this problem. We manage a number of CP-FW1 on AIX. On one of these we notice the following in the logs: 9:35:26 drop xxx.xxx.xxx >en0 proto tcp src 127.0.0.1 dst 192.168.13.25 service 1548 s_port http rule reason: local inte...

espique · espique

Hi there, we are currently running VPN-1 AI R55 on a Nokia 350. It's a single firewall, so enforcement and smartserver are on that machine. we are planing to add more gateways in the future so we want to put the smart server on a windows machine and have the nokia run only the enforcement module. ...

Secure user Authentication · shaulbe

Hi, User Authentication & client Authentication is in clear text? If yes how can i secur it like https? Thank you Shaul

babyfoot44 · babyfoot44

I am experiencing "connection failed" between SmarCenter SecurePlateform NG AI R54 and Reporter Server on Windows 2000. SIC properly established between the two servers but it still does not work. No communication is allowed. Does anyone have a feed-back on this configuration ? Thank you...

Phil · Phil

Hi, Anyone give me any advice please as I am puzzled . We have a MS 2000 Exchange server on the DMZ On an Internal 192. address and another group of servers on the internal network with 10. addresses. From the DMZ server we are unable to get DCOM/RPC to work properly to connect to the serv...

Souly · Souly

Hello, I am getting balder by the minute after ripping my hair out. I am having a lot of trouble trying to get SCV to work. We are using Splat NG (R55) I have got SC working fine, using connect mode and office mode with IP pools etc. Everything works great without SCV. Our rule base is in traditio...

jbowman · jbowman

Anyone done analysis of the Checkpoint Add-in products like SmartView Reporter, Monitor, Update, LSM, etc. against 3rd party tools? Need to know: A: The 3rd party equivalents B: Are they better / worse / unable to get at API's? C: Overall worth their we...

jbowman · jbowman

Can anyone answer why IPSO spits out memory allocation errors simply because I have an extra unused package on a vrrp pair member? Is memory somehow statically referenced between pairs?

ianpoulsen · ianpoulsen

I have looked and looked. Read and tried...but maybe I am just stupid or something!!! Please help. I am at home on a cable modem network...with a Netgear rt311. with private addresses 192.168.150.xxx. I have one laptop which is xxx.xxx.xxx.21. It has s...

dprakken · dprakken

Trying to help a client get his checkpoint vpn users through a PIX firewall. No nat'ing on the pix, access-lists allow esp and isakmp passthrough. Any thing else you can think of? Thanks

raulico · raulico

Hi Guys, i would like to use isp redondancy feature on nokia platform, but in this momenti isn't supported, who knows about future. i'm using with 2 static route with different cost but the script doesn't work, icmp check and auto-switch, and most important thing is load sharing.

rdivina · rdivina

CP-FW1 v4.1 build 41710 on NT Server v4.0 build 1381 SP6 there's a continuous (at regular interval) udp broadcast on the internet using two specific ports and i need this broadcast on my local network, but instead of static NAT for every hosts on my local network i want my entire network to rec...

Phil · Phil

Hi, Anyone give me any advice please as I am puzzled . We have a MS 2000 Exchange server on the DMZ On an Internal 192. address and another group of servers on the internal network with 10. addresses. From the DMZ server we are unable to get DCOM/RPC to work properly to connect to the serv...

docmike · docmike

I have a problem with my Firewall-1 4.1. For some reason the SMTP traffic is being translated to the wrong address. It should be going to 10.1.1.10 and it is going to 10.1.1.50, which is an invalid address on my network. I have a rule setup to send it to 10.1.1.10, but for some reason when I look at the log it...

Topic		Started By	Replies	Views	Last Post
	Secure Platform ISO (Preview) Does anyone know where one can download an .iso of secureplatform? Its frustrating that its not readily available on CP's usercenter (or in general).. or at least, not easily locatable .	abeck	1	684	Feb 29, 2004 by ccseng2002
	Help needed: local interface address spoofing (Preview) I hope there is someone out there that can help me with this problem. We manage a number of CP-FW1 on AIX. On one of these we notice the following in the logs: 9:35:26 drop xxx.xxx.xxx >en0 proto tcp src 127.0.0.1 dst 192.168.13.25 service 1548 s_port http rule reason: local inte...	jdewet	0	900	Feb 26, 2004 by jdewet
	Splitting a single box into enforcement and server (Preview) Hi there, we are currently running VPN-1 AI R55 on a Nokia 350. It's a single firewall, so enforcement and smartserver are on that machine. we are planing to add more gateways in the future so we want to put the smart server on a windows machine and have the nokia run only the enforcement module. ...	espique	1	576	Feb 25, 2004 by hozman
	Secure user Authentication (Preview) Hi, User Authentication & client Authentication is in clear text? If yes how can i secur it like https? Thank you Shaul	shaulbe	0	556	Feb 23, 2004 by shaulbe
	Reporter Module failed on Secure Plateform (Preview) I am experiencing "connection failed" between SmarCenter SecurePlateform NG AI R54 and Reporter Server on Windows 2000. SIC properly established between the two servers but it still does not work. No communication is allowed. Does anyone have a feed-back on this configuration ? Thank you...	babyfoot44	0	341	Feb 23, 2004 by babyfoot44
	DCOM - Exchange 2000 through NG-AI R54 (Preview) Hi, Anyone give me any advice please as I am puzzled . We have a MS 2000 Exchange server on the DMZ On an Internal 192. address and another group of servers on the internal network with 10. addresses. From the DMZ server we are unable to get DCOM/RPC to work properly to connect to the serv...	Phil	1	576	Feb 23, 2004 by EgonR
	SecureClient SCV Config Issue's - HELP!! (Preview) Hello, I am getting balder by the minute after ripping my hair out. I am having a lot of trouble trying to get SCV to work. We are using Splat NG (R55) I have got SC working fine, using connect mode and office mode with IP pools etc. Everything works great without SCV. Our rule base is in traditio...	Souly	0	572	Feb 23, 2004 by Souly
	Cost-Benefit Analysis of Reporter / Monitor / etc. (Preview) Anyone done analysis of the Checkpoint Add-in products like SmartView Reporter, Monitor, Update, LSM, etc. against 3rd party tools? Need to know: A: The 3rd party equivalents B: Are they better / worse / unable to get at API's? C: Overall worth their we...	jbowman	0	577	Feb 21, 2004 by jbowman
	IPSO - Weak Memory Management for VRRP Pairs? (Preview) Can anyone answer why IPSO spits out memory allocation errors simply because I have an extra unused package on a vrrp pair member? Is memory somehow statically referenced between pairs?	jbowman	0	570	Feb 21, 2004 by jbowman
	secureclient, fw-1ver4, Netgear Ports problem.. ?? (Preview) I have looked and looked. Read and tried...but maybe I am just stupid or something!!! Please help. I am at home on a cable modem network...with a Netgear rt311. with private addresses 192.168.150.xxx. I have one laptop which is xxx.xxx.xxx.21. It has s...	ianpoulsen	0	596	Feb 21, 2004 by ianpoulsen
	CP VPN through a PIX FW (Preview) Trying to help a client get his checkpoint vpn users through a PIX firewall. No nat'ing on the pix, access-lists allow esp and isakmp passthrough. Any thing else you can think of? Thanks	dprakken	0	528	Feb 19, 2004 by dprakken
	isp redundancy and nokia (Preview) Hi Guys, i would like to use isp redondancy feature on nokia platform, but in this momenti isn't supported, who knows about future. i'm using with 2 static route with different cost but the script doesn't work, icmp check and auto-switch, and most important thing is load sharing.	raulico	2	722	Feb 19, 2004 by raulico
	udp broadcast (Preview) CP-FW1 v4.1 build 41710 on NT Server v4.0 build 1381 SP6 there's a continuous (at regular interval) udp broadcast on the internet using two specific ports and i need this broadcast on my local network, but instead of static NAT for every hosts on my local network i want my entire network to rec...	rdivina	0	519	Feb 19, 2004 by rdivina
	DCOM - Exchange 2000 through NG-AI R54 (Preview) Hi, Anyone give me any advice please as I am puzzled . We have a MS 2000 Exchange server on the DMZ On an Internal 192. address and another group of servers on the internal network with 10. addresses. From the DMZ server we are unable to get DCOM/RPC to work properly to connect to the serv...	Phil	0	534	Feb 18, 2004 by Phil
	SMTP Translation problem (Preview) I have a problem with my Firewall-1 4.1. For some reason the SMTP traffic is being translated to the wrong address. It should be going to 10.1.1.10 and it is going to 10.1.1.50, which is an invalid address on my network. I have a rule setup to send it to 10.1.1.10, but for some reason when I look at the log it...	docmike	0	549	Feb 17, 2004 by docmike
«First < 1 … 18 19 20 21 > Last» \| Page of 21 sorted by