[FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-11-03 Thread Hans van den Boomen
Hi cisco4n, Matthew, I have the same problem on our firewall. Do you need to specify anything specific under the Advanced button while creating the tcp-135 service? Thanks, Hans This message has been checked for all

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-11-03 Thread Mark Elsen
Hi cisco4n, Matthew, I have the same problem on our firewall. It might be wise to describe your problem (again). M. Do you need to specify anything specific under the Advanced button while creating the tcp-135 service? Thanks, Hans =

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-11-01 Thread Hugo van der Kooij
On Tue, 31 Oct 2006, cisco4ng wrote: Ok. I applied microsoft solution http://support.microsoft.com/kb/899148 and reboot the Windows 2003 Enterprise Server. When the server came back up, I tried to get my WinXP to join the domain and I am still getting this error: Attack Name:

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-31 Thread cisco4ng
Ok. I applied microsoft solution http://support.microsoft.com/kb/899148 and reboot the Windows 2003 Enterprise Server. When the server came back up, I tried to get my WinXP to join the domain and I am still getting this error: Number: 1544 Date:

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-31 Thread Matthew Odendaal
] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC Ok. I applied microsoft solution http://support.microsoft.com/kb/899148 and reboot the Windows 2003 Enterprise Server. When the server came back up, I tried to get my WinXP to join the domain and I am still getting this error

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-31 Thread cisco4ng
- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of cisco4ng Sent: 31 October 2006 02:29 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC Ok. I applied microsoft solution http

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-30 Thread pkc_mls
http://support.microsoft.com/kb/899148/fr remove the /fr for the same infos not in french. (quite hard on monday morning ... ) I never tried this, but I hope this'll work for you. cisco4ng

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-30 Thread cisco4ng
hi, Thanks for the link. However, when I look under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\ I do not see Rpc subkey. The sk seems to imply that the sub key is already there. Furthermore, my windows Enterprise 2003 server is an AD server. Anymore ideas? thanks. cisco4ng

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-30 Thread pkc_mls
cisco4ng a écrit : hi, Thanks for the link. However, when I look under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\ I do not see Rpc subkey. The sk seems to imply that the sub key is already there. Furthermore, my windows Enterprise 2003 server is an AD server. Anymore

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-30 Thread chkp tech
I've been at a client site for the past couple weeks, and the infrastructure team came over to me and had the exact same problem. They asked me to look at it, and I could see that dcerpc traffic was being dropped. You can verify this traffic is being dropped by something other than the rulebase

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-30 Thread cisco4ng
Hi Jason, I already apply the patch and I will reboot the win2k3 server this eveing. Will let you know this evening. I am curious. Is Checkpoint aware of this issue? If so, what is checkpoint planned on doing anything about this? Like you said, I applied the latest

[FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-29 Thread cisco4ng
scenario: hostA---FWA---Internet---FWB---hostB FWA is a Cisco Pix version 7.2(1) FWB is running NGx R61 with HFA_01 running on IPSO 4.1 build 19 hostA is a windows XP Pro. with Service Pack 2 and latest patches hostB is Windows 2003 Service Pack 1 with latest patches I have

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-29 Thread Gary Scott
- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of cisco4ng Sent: Sunday, October 29, 2006 10:09 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC scenario: hostA---FWA

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-29 Thread Hugo van der Kooij
On Sun, 29 Oct 2006, cisco4ng wrote: Attack Name: DCE-RPC Enforcement Violation Information: DCE-RPC Interface UID: e3514235-4b06-11d1-ab04-00c04fc2dcd2 Attack Information: UUID is not allowed through the Rule Base Since you have the UID you can add your own

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC

2006-10-29 Thread pkc_mls
cisco4ng a écrit : scenario: hostA---FWA---Internet---FWB---hostB FWA is a Cisco Pix version 7.2(1) FWB is running NGx R61 with HFA_01 running on IPSO 4.1 build 19 hostA is a windows XP Pro. with Service Pack 2 and latest patches hostB is Windows 2003 Service Pack 1 with