Hello Hadmut,
Thursday, October 16, 2003, 12:36:41 AM, you wrote:
Hadmut Danisch> On Wed, Oct 15, 2003 at 06:53:56PM +0300, Peter Kirkov wrote:
>> Set the SecureClient ( DesktopSecurity in SMartDashboard) in order to
>> protect the client from viruses.
Hadmut Danisch> Ha, world is not as simple. The owner of that notebook is using
Hadmut Danisch> it for other purposes and it is his private property. He will
Hadmut Danisch> absolutely not accept to be covered by SecureClient all the time,
Hadmut Danisch> and to have set his policy by a central management of the IT
Hadmut Danisch> department. (The owner of this notebook can't be administratively
Hadmut Danisch> overriden, since he is the director of the IT department.)
Hadmut Danisch> It is acceptable if the notebook is under control of SecureClient
Hadmut Danisch> for those 10 minutes a day when the client is connected to the
Hadmut Danisch> company network. It is not acceptable for the 23:50 of the day when
Hadmut Danisch> he isn't. Then he needs the XP Firewalls.
Hadmut Danisch> There are two problems:
Hadmut Danisch> - Turning on and off the XP Firewall is too much overhead.
Hadmut Danisch> - The gap between turning one firewall off and the other on allows
Hadmut Danisch> attacks.
Hadmut Danisch> So it should be possible to configure the XP firewall to simply
Hadmut Danisch> allow what's needed for running SecureClient.
Hadmut Danisch> Hadmut
Well, if you set up rule that allow all traffic to and from access
server/network/whatever and place it on the top. I'm not familiar with
XP firewall and setting it up, but if something like that is possible,
than it should do the trick.
Also I believe that SecuRemote/SecureClient can work using HTTP
Tunneling, i.e. for XP firewall it looks like HTTP session from laptop
to edge firewall of your company network. I'm not sure how exactly
this can be achieved, but I'm sure there is such option.
Best regards,
Peter
--
Peter Kirkov
Support Engineer
________________________________________________
ACT Sofia
Tzarigradsko shosse blvd. 7km
BIC-IZOT, Office 710-714 Tel: +359-2-9718354
1113 Sofia - Bulgaria Fax: +359-2-9718343
mobile: +359-889-919638
mailto:[EMAIL PROTECTED]
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
