|
FW1-AI-r54 & Dynamic DSL internet Connection
(Preview)
Hi all,
A seemingly simple issue I just can't find the configs to do; Setup: - CPFW1-AI-r54 on W2003 - Dynamic DSL internet connection using RASPPPoE
Prior to installing FW1, the RASPPPoE connection works fine, but after installing, I try connecting to the internet and (obviously) it doesn't c...
|
xgtrboy
|
1
|
538
|
|
|
|
Retransmitted data does not match original data
(Preview)
Hi,
I'm getting this message appear in Smartview Tracker every now and again.
message_info: Retransmitted data does not match original data
I've read somewhere that it is to do with proxy servers sending keep-alives. Does anyone have any more info and any way to stop it?
I am using R5...
|
freddybobs
|
0
|
681
|
|
|
|
How to config IKE phase I as aggressive mode
(Preview)
 Phase I modes
VPN-1 supplies two modes for IKE phase I between Gateways:
• Main Mode
• Aggressive Mode
If aggress...
|
bolt
|
1
|
3123
|
|
|
|
SVN and NG AI
(Preview)
Hi
Can someone please confirm which components of Firewall-1 NG AI are not considered to be part of SVN.
Thanks.
AUX
|
auxinet
|
3
|
538
|
|
|
|
ICMP and NG AI
(Preview)
Hi
Can someone please confirm whether ICMP is enabled by default in Firewall-1 NG AI ?
Thanks.
|
auxinet
|
2
|
548
|
|
|
|
Adding Matching Criteria to the Validation Process
(Preview)
Consults a question£¬I must dispose Configuration of PKI Operations£¬Now.Had found the ”°Adding Matching Criteria to the Validation Process”± material in the CheckPoint help documents£¬But can't I how also find the disposition the place”£
Because I have not built externally managed VPN en...
|
bolt
|
1
|
528
|
|
|
|
NG AI R55 and Microsoft Internet Explorer
(Preview)
Guys,
I am running Checkpoint Secureplatform NG AI R55 with HFA04 to protect my LAN. Everyone behind the LAN is "hide" NAT to the firewall "external" interface when going out to the Internet. I would like to be able to block users from surfing the Internet when using Microsoft Interne...
|
ccseng2002
|
0
|
606
|
|
|
|
Cisco VPN and Checkpoint 4.1
(Preview)
Hi,
I am using Checkpoint 4.1 at my office and trying to connect to another site with a Cisco VPN (4.0.4D). The traffic looks as though its going through fine but I cannot ping any server at the other site. If I dial out, and therefore bypass the Checkpoint firewall, then everything work...
|
MattRook
|
1
|
556
|
|
|
|
ISL or 802.1Q trunking to a Cisco switch
(Preview)
Does anyone know of some whitepapers that discuss trunking multiple VLANs on a CP NG AI firewall? Can
|
seandi
|
1
|
518
|
|
|
|
Firewall-1 R55W?
(Preview)
Checkpoint have a new version out, R55W. What is this, we've just finished upgrading all our firewalls to R55, arrggh!
From what I can tell, the only feature enhancements seem to be addition application level checks (ie. more AI).
Anyone tried it yet?
|
crazyfool
|
0
|
516
|
|
|
|
Adding Matching Criteria to the Validation Process
(Preview)
Consults a question£¬I must dispose Configuration of PKI Operations£¬Now.Had found the ”°Adding Matching Criteria to the Validation Process”± material in the CheckPoint help documents£¬But can't I how also find the disposition the place”£
Because I have not built externally managed VPN en...
|
bolt
|
0
|
514
|
|
|
|
High Availability
(Preview)
Hi, where can I find documentation to setup high availability for Checkpoint NG AI R54. Do I need additional licence?
Also I am planning a site-to-site VPN with head office mainly for SMTP and Active Dir traffic on a Compaq PIII 866Mzh server, 512mb RAM (win nt 4.0) - is this mach...
|
akashem
|
4
|
497
|
|
|
|
Error: Cannot Calculate IKE Ranges
(Preview)
I get the above message in the Firewall log when I try to establish an IKE site-site VPN (pre-shared keys) from the remote site to the main site. VPN works fine flowing the other way!
Any Ideas? This is FP2 on an IP330.
Thanks
Beau
|
bmonday
|
1
|
457
|
|
|
|
Spliting Management and Enforcement
(Preview)
Hi,
can anyone please tell me whether I need a new licence if I want to split management and enforcement module in two different machines.
Currently I have one box (NT) with VPN/FW-1 NG AI 100 users Internet Gateway licecne.
Thanks in advance.
akash
|
akashem
|
0
|
464
|
|
|
|
invalid characters in request in FW log
(Preview)
The site www.mappy.be is not viewed correctly by IE since we implemented Firewall-1 Express R55 ( together with ESafe 4 FR1 in CVP mode.
In the log we see the error "Invalid characters in request".
Has anyone had the same issue ?
Thanks
|
kanne
|
0
|
467
|
|
|