[FW-1] R: [FW-1] R: [FW-1] Re: [FW-1] R55 SPLAT last build?

2007-01-25 Thread Scarpati Massimiliano
Hi Sergio, in fact, I think that my problem is the controller raid and specific G4 controller Integrated Smart Array 6i. I've not try to use my Build 121 on the G4 yet, why the hardware is arriving.. I have read on this list people encountered problems with array driver using old build of

Re: [FW-1] R: [FW-1] R: [FW-1] Re: [FW-1] R55 SPLAT last build?

2007-01-25 Thread Sergio Alvarez
Well, I had experience with the G4's Smart Array 6i on R60, and it worked perfect. I understand you will be installing R55, but if you are willing to upgrade, I can assure you will avoid having problems. Regards On 1/25/07, Scarpati Massimiliano [EMAIL PROTECTED] wrote: Hi Sergio, in fact,

[FW-1] BSOD - help needed

2007-01-25 Thread Bunyan, Chris - shb account
We have Checkpoint Express FW-1 NG AI R55 with Hotfix 18 running on an HP ML370 G3 server with 1GB memory. For several weeks now the server has been crashing fairly regularly, at random, with fw.sys identified as the culprit in the BSOD. This only happens Monday to Friday during office working

Re: [FW-1] BSOD - help needed

2007-01-25 Thread Neil Pike
Chris, A BSOD is a bug or a hardware fault. If it's always the same code and address then it almost certainly isn't hardware. Hardware caused BSOD's tend to result in a wide variety of BSOD codes and addresses. The fact that it's always fw.sys makes it easier to debug, as it's always

Re: [FW-1] BSOD - help needed

2007-01-25 Thread Ansar Mohammed
Can you send the complete text of the BSOD. For example IRQL_YADAYADAYADA And the stop codes please -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:FW-1- [EMAIL PROTECTED] On Behalf Of Bunyan, Chris - shb account Sent: January 25, 2007 7:50 AM To:

[FW-1] Websense with Client Auth

2007-01-25 Thread fwguru
Fellow Gurus - Has anybody ever implemented a Websense UFP rule with Client Auth? I am wondering if the following setup will work: Group_of_Nets | ANY | http-Websense_UFP | Reject | Log | Note: Websense Block rule with URI Resource Group_of_Users | ANY | http | Client Auth | Log | Note: HTTP

Re: [FW-1] Websense with Client Auth

2007-01-25 Thread fwguru
never mind. I got it to work. thanks On 1/25/07, fwguru [EMAIL PROTECTED] wrote: Fellow Gurus - Has anybody ever implemented a Websense UFP rule with Client Auth? I am wondering if the following setup will work: Group_of_Nets | ANY | http-Websense_UFP | Reject | Log | Note: Websense

Re: [FW-1] Websense with Client Auth

2007-01-25 Thread Roger P Herr
How did you get it to work??? Roger Herr WhyNot? Consulting Services 24165 IH 10 West Suite 217-183 San Antonio, Texas 78257 210-860-3990 Some men see things as they are and say why? I dream things that never were and say Why Not? -Robert F.

Re: [FW-1] Websense with Client Auth

2007-01-25 Thread hboogz
what do you think happened for it to work ? On 1/25/07, fwguru [EMAIL PROTECTED] wrote: never mind. I got it to work. thanks On 1/25/07, fwguru [EMAIL PROTECTED] wrote: Fellow Gurus - Has anybody ever implemented a Websense UFP rule with Client Auth? I am wondering if the following

Re: [FW-1] Websense with Client Auth

2007-01-25 Thread Claudia Cordova
Does Client Auth work with Resources? I before tried and I remember that is incompatible. Client Auth doesn't work with resource, almost in earlier version that R62. In R62 authentication work with resource but doesn't with HTTP proto. Claudia Cordova Soporte Tecnico -Mensaje original-

Re: [FW-1] Websense with Client Auth

2007-01-25 Thread fwguru
Rules and config remained as-is. I switched the Client Auth config from Manual to Partially Automatic. It was an oversight on my part. That worked immediately. In Manual mode, they'd HTTP to port 900, then the FW would allow only one connection and fail on all other attempts. Partially

Re: [FW-1] Eventia Analyzer..more specifically

2007-01-25 Thread Ted Serreyn
Start a consolidation session. Ted Serreyn Serreyn Network Services, LLC -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of CPSecurity Sent: Monday, January 22, 2007 4:21 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject:

Re: [FW-1] vpn1 edge adsl cannot connect

2007-01-25 Thread Ted Serreyn
Check NAT, check that the edge box is defined properly on the management station and you have pushed the policy to any firewall that you talk thru/to. Once that is done make sure the 9280 and 9282 packets are actually getting to the management station. If this is the first one you have done, you

Re: [FW-1] BSOD - help needed

2007-01-25 Thread Ray
What version of Windows and SP level? No, exceeding the license count is only supposed to generate log entries. I've never heard otherwise. The ML370-G3 is about three years old, isn't it? Have you tried running one of HP's firmware update CD's on it? Ray From: Bunyan, Chris - shb

[FW-1] Changing Administrator Passwords

2007-01-25 Thread Crist Clark
We need to change passwords of administrators defined using the 'cpconfig' command line interface. In R55, when given the choice, you ask to add a new administrator, but chose the name of an existing one. You then can change the password and other characteristics. In R60, the only option given by

Re: [FW-1] Changing Administrator Passwords

2007-01-25 Thread Sergio Alvarez
Critics used to bang Check Point with the fact that anybody with physical access to the SmartCenter server could do whatever they wanted to the adminitrator users of the firewall and considered this a major vulnerability, therefore starting from NGX, you create a single admin user from the CLI

Re: [FW-1] vpn1 edge adsl cannot connect

2007-01-25 Thread pkc_mls
Ted Serreyn a écrit : Check NAT, check that the edge box is defined properly on the management station and you have pushed the policy to any firewall that you talk thru/to. Once that is done make sure the 9280 and 9282 packets are actually getting to the management station. If this is the