RE: Remote Administration

[Kevin Lundy]

Title: Remote Administration

Shannon, others have addressed the remote administration aspect.  Let me address FW1.  Yes, MS VPN can be made to work, but it's very difficult.  You say you have "SecureRemote client working ON the FW"?  Is that a typo?  The SecureRemote client does not belong on the FW itself.  You enter a SecureRemote license key on the FW, and install the client software on the client. 

 

When you make a connection, it does "just sit there".  Sort of like an old fashioned modem connection.  Once you get the connection, that is all you have.  Then you have to do something.

 

So you would make a SecureRemote connection, and then fire up the Terminal Service client.  The advantage of this is that you don't have to open the terminal service ports to the entire internet.

 

Head over to http://www.phoneboy.com where you will find the FW1 FAQ (much better than even Checkpoint's).  You will also find 2 links to 2 different mailing lists for FW1 support.  The folks there are just as helpful as the folks on this list.

-----Original Message-----
From: Shannon Speck [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 21, 2001 8:38 AM
To: NT System Admin Issues
Subject: Remote Administration

I am needing to get a solution in place today to connect W2K Pro workstation via the internet to a W2K Server (not advanced server). The external user need to have control of the box enought to run SQL Enterise Manager and have access to all administrative task (Event log, etc..) I have heard some things about Remote Admin in 2000?? I would rather not have to use PC-Anywhere but if it's the fastest solution I may use it for now. I also am sitting behind a Check Point FW1 version 4.1. This is what is stopping me from just using MS's VPN client. It will not pass it. Many say that it will but we have tried everything we can find and nothing has worked. I have got FW1 SecureRemote client working on the FW, but we are not sure what to do after we make the connection. It just sits there. I configured the SSO with domain and user name, but saw no change in access. Any help would be appreciated. If more info is needed please let me know.

Thanks,

SS

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm