FireWall-1 Gurus Forum - FireWall-1 Gurus Forum

yhyap · yhyap

Hi there, We just upgraded our 4.1 to FW-1 NG on NOkia platform. OUr environment consist of single policy server with multiple enforcement module across multiple countries. THe policy server is sitted in an internal network 10.x.x.x Previous 4.1 allow us to define mult...

dexter · dexter

are the SIC errors documented somewhere ??

theunf · theunf

Hi all, After trying to follow 6 diferent guides about upgrading to AI and NG FP3, i finally solved my problem with users database . At my final lab i created the groups and imported user database BEFORE restoring files ( except *.NDB ) or import the .tgz file created with AI R55 export...

bob2 · bob2

Consider the following environment : Browser -> FW-1 (HTTP Security Server) --> voila.mappy.com A very simple rulebase : 1. any any http->ressource Accept 2. any any any drop Ressource "ressource" is a very generic ressource used to force HTTP Security Server to proxy my HTTP ses...

t500 · t500

is there a way to reset the ssl cert on SPLAT? i built the fw using a different ip address, and now that it is at the proper ip address i get ssl cert errors on login. anyone know a way to generate and install a new cert?

dmoncur · dmoncur

I am trying to open a VPN session from outside my FW to a Microsoft RAS inside the FW. I have created a rule to allow ANY service from the external host to the internal RAS server. The packet-exchanges following the initial TCP session use Generic Routing Encapsulation (GRE) as the IP protocol. By def...

QuietSnow · QuietSnow

I'm trying to figure out how to check the CPU utilization on a Nokia firewall. It's running IPSO 3.4 & I can't recall the command...can someone help? Thanks!

koon · koon

Hi, I set up NG AI R55 on SecurePlatofrm with ClusterXL. The load-balancing works and traffic flow is fine. One thing that puzzles me is that I am not able to ping all the physical interfaces' IP addresses and virtual IP address of any cluster segment. Only 1 physical IP address and the virtual IP addr...

hozman · hozman

I have a question about the smtp_rfc821. What are the down sides of disabling the rfc821 checking? thanks hoz

crazyfool · crazyfool

Hi there, Anybody know when or if the patches will be coming out for NG FP3 and FP2? I can only seem to find the NG AI R55 patch (which is part of the HFA for R55).

acraick · acraick

Glad to see we've stepped fully into Cyberspace and now have a hangout. I hate mailing lists and think a web based forum is much more usefull (searching, real time feedback etc) All we need now is some content. Any guidelines for posting and does this board support different topic direct...

dreain · dreain

Hello, The CERT advisory for this vulnerability says that in order to mitigate this risk one can disable the HTTP security server, install a patch, or on AI enforcement points you can disable AI: "Check Point has reported that their products are only affected by this vulnerabilit...

PhoneBoy · PhoneBoy

And hey, it's on someone else's servers. :) You get banner ads as a result, but that's the price you pay for free... -- PhoneBoy

jag · jag

http://www.checkpoint.com/techsupport/alerts/security_server.html.

Topic		Started By	Replies	Views	Last Post
	Auto Fetch when Firewall restart (Preview) Hi there, We just upgraded our 4.1 to FW-1 NG on NOkia platform. OUr environment consist of single policy server with multiple enforcement module across multiple countries. THe policy server is sitted in an internal network 10.x.x.x Previous 4.1 allow us to define mult...	yhyap	1	693	Feb 17, 2004 by texcs
	SIC. (Preview) are the SIC errors documented somewhere ??	dexter	0	561	Feb 16, 2004 by dexter
	Upgrading to AI R55 (Preview) Hi all, After trying to follow 6 diferent guides about upgrading to AI and NG FP3, i finally solved my problem with users database . At my final lab i created the groups and imported user database BEFORE restoring files ( except *.NDB ) or import the .tgz file created with AI R55 export...	theunf	0	718	Feb 15, 2004 by theunf
	HTTP Securiy Srv. : Invalid characters in response (Preview) Consider the following environment : Browser -> FW-1 (HTTP Security Server) --> voila.mappy.com A very simple rulebase : 1. any any http->ressource Accept 2. any any any drop Ressource "ressource" is a very generic ressource used to force HTTP Security Server to proxy my HTTP ses...	bob2	0	579	Feb 14, 2004 by bob2
	reset ssl cert on secureplatform (Preview) is there a way to reset the ssl cert on SPLAT? i built the fw using a different ip address, and now that it is at the proper ip address i get ssl cert errors on login. anyone know a way to generate and install a new cert?	t500	1	675	Feb 14, 2004 by Kimmen
	Checkpoint FW-1 V4.1 and GRE (Preview) I am trying to open a VPN session from outside my FW to a Microsoft RAS inside the FW. I have created a rule to allow ANY service from the external host to the internal RAS server. The packet-exchanges following the initial TCP session use Generic Routing Encapsulation (GRE) as the IP protocol. By def...	dmoncur	1	910	Feb 14, 2004 by dmoncur
	Checking CPU Utilization (Preview) I'm trying to figure out how to check the CPU utilization on a Nokia firewall. It's running IPSO 3.4 & I can't recall the command...can someone help? Thanks!	QuietSnow	2	848	Feb 13, 2004 by PhoneBoy
	ClusterXL question (Preview) Hi, I set up NG AI R55 on SecurePlatofrm with ClusterXL. The load-balancing works and traffic flow is fine. One thing that puzzles me is that I am not able to ping all the physical interfaces' IP addresses and virtual IP address of any cluster segment. Only 1 physical IP address and the virtual IP addr...	koon	0	701	Feb 12, 2004 by koon
	smtp_rfc821 (Preview) I have a question about the smtp_rfc821. What are the down sides of disabling the rfc821 checking? thanks hoz	hozman	0	589	Feb 11, 2004 by hozman
	H.323 vulnerabilites (Preview) Hi there, Anybody know when or if the patches will be coming out for NG FP3 and FP2? I can only seem to find the NG AI R55 patch (which is part of the HFA for R55).	crazyfool	0	556	Feb 10, 2004 by crazyfool
	Thanks phoneboy !! (Preview) Glad to see we've stepped fully into Cyberspace and now have a hangout. I hate mailing lists and think a web based forum is much more usefull (searching, real time feedback etc) All we need now is some content. Any guidelines for posting and does this board support different topic direct...	acraick	4	947	Feb 8, 2004 by grabber
	HTTP Security Server CERT advisory (Preview) Hello, The CERT advisory for this vulnerability says that in order to mitigate this risk one can disable the HTTP security server, install a patch, or on AI enforcement points you can disable AI: "Check Point has reported that their products are only affected by this vulnerabilit...	dreain	1	697	Feb 6, 2004 by dokeefe
	Welcome to the new web-based forum (Preview) And hey, it's on someone else's servers. :) You get banner ads as a result, but that's the price you pay for free... -- PhoneBoy	PhoneBoy	1	684	Feb 6, 2004 by dprakken
	HTTP Security Server advisory (Preview) http://www.checkpoint.com/techsupport/alerts/security_server.html.	jag	0	576	Feb 6, 2004 by jag
«First < 1 … 19 20 21 \| Page of 21 sorted by