[FW-1] Connection between DMZs via FW external interface

2004-08-02 Thread Russell Aspinwall
Hi, I have two servers which need to communicate, they both sit on seperate DMZs on the same firewall. Both servers can be accessed externally via their public IP addresses. When I attempt a connection, the IP address is resolved correctly but the connection does not occur. The connections

Re: [FW-1] R55 and SecureClient - Policy Server Down in Smartview Status- what am I doing wrong ?

2004-08-02 Thread Greg Chavez
Is dtpsd running on the enforcement point? If not, then you are not actually running the policy server daemon. I'm not sure how this works on Nokia appliances, but on Solaris, you need to stop the firewall, add the policy server package CPdtps-50, then start the firewall. Also, see Checkpoint

[FW-1] R55 and SecureClient - Policy Server Down in Smartview Status- what am I doing wrong ?

2004-08-02 Thread neil.kemp
Afternoon all. Just a quick question. I am on site at the moment, installing a distributed R55 installation with SecureClient. I have a management station on Windows 2003 and a Nokia IP350 as the enforcement point. THe Secure Client licence attaches the VSC 25 users to the Management Station,

Re: [FW-1] Connection between DMZs via FW external interface

2004-08-02 Thread Qutub
Looks like you are doing NATing for these serves. Define manual NAT rules to forward original packets (without NAT) when traffic between these servers. Russell Aspinwall [EMAIL PROTECTED] wrote:Hi, I have two servers which need to communicate, they both sit on seperate DMZs on the same

Re: [FW-1] R55 and SecureClient - Policy Server Down in Smartview Status- what am I doing wrong ?

2004-08-02 Thread Chris Hoff
Did you reboot the IP350 after enabling the Policy Server? This is something that catches a lot of people -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of neil.kemp Sent: Monday, August 02, 2004 9:01 AM To: [EMAIL PROTECTED]

[FW-1] Office mode

2004-08-02 Thread Fabian Tuender
Goodevening, I hope someone can clear a problem for me. We need to use office mode to assign ip address to clients. Without office mode everything works fine, I can get a connection with a secureremote client to our firewall and ping any address behind it and all trafic passes trough without

Re: [FW-1] Office mode

2004-08-02 Thread Ray
Office Mode IP Pools CANNOT be part of the subnet of your internal networks, however with the later versions of AI, they can be part of the encryption domain. Your internal routers must know to send all Office Mode IPs tothe firewall. Assume you have assigned 192.168.100.0 255.255.255.0 to the

Re: [FW-1] R55 and SecureClient - Policy Server Down in Smartview Status- what am I doing wrong ?

2004-08-02 Thread neil.kemp
Just to let you all know, it was the fact that I had not enabled Policy Server on the Nokia !!! Looking for a more complex solution than it was. Thanks for all the suggestions.. -Original message- From: Greg Chavez [EMAIL PROTECTED] Date: Mon, 2 Aug 2004 15:51:24 +0100 To: [EMAIL

[FW-1] Nokia: modzap.gz utility

2004-08-02 Thread Oliver
Hi, anybody can send me the modzap.gz utility? I tried to get it from checkpoint support web but i couldnt. Thanks, Regards. Oliver. _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en