Jerald Josephs wrote

>For one, FireWall-1 does not have a method where it can enumerate all of
the
>authenticated users which have a current connection and then dynamically
>associate
>an action that would enable it to encrypt outbound packets to the IP
address
>of
>the SecuRemote client. It can only encrypt and encapsulate packets that
>match an
>existing entry in the state tables.

What about using the 'in userc_rules' statement in a User Defined service
property. I have used it to allow the Help Desk to initiate a pcANYWHERE
connection. Seems to work well, or am I missing the point somewhere?


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to