Le 28/11/2012 7:20, Matthias Leu a écrit :
Am 28.11.2012 15:19, schrieb pkc_mls:
Hi,
how do you authenticate? If you use e.g. UserAuth, the FTP Security
Server is used. This might cost performance.
Maybe you can try to use ClientAuth or define a rule using Access Roles
with IA.
Hope it helps,
best regards,
Matthias
Hallo Matthias,
The authentication method is used in lots of scripts by customer and
can't be modified.
The same configuration on ngx r65 doesn't show the same performance
difference.
The aftpd.elg file shows logs related to antivirus, but the antivirus is
neither used nor licensed.
[aftpd 19309 4115212496]@myfirewall[28 Nov 17:48:14] get_engine_version:
KAV start. kav_init_called=0
[aftpd 19309 4115212496]@myfirewall[28 Nov 17:48:14]
avim_get_engine_version: engine version: major ver: 0, minor ver: 0,
build number: 0, date: 00/00/0000
[aftpd 19309 4115212496]@myfirewall[28 Nov 17:48:14]
get_sig_files_version: KAV start. kav_init_called=0
[aftpd 19309 4115212496]@myfirewall[28 Nov 17:48:14]
avim_get_sig_file_version: signature file , major ver: 0, minor ver: 0,
build number: 0, date: 00/00/0000
[aftpd 19309 4115212496]@myfirewall[28 Nov 17:48:14] write_status: will
write len=216 len=192 len=153 buffers
Is there a way to disable it within the security servers ?
Another issue is that the ips doesn't restrict the ftp commands on my
lab installation :(.
I blocked all commands in prevent mode but ftp still works.
thanks.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to lists...@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ow...@ts.checkpoint.com
=================================================
