[FW-1] Not valid license

2004-08-17 Thread Salom Rello
Hi all, I am having a problem with Check Point Enterprise Unlimited Users. I have associated the license to IP address of SmartCenter Server. I have installed the firewall and I have installed the license. During installation no error appears, but when I reboot the server (I am in test mode

[FW-1] ASF or Nokia?

2004-08-17 Thread CihanS
I have posted this before but not heard from anyone...If I can get your comment on which one is much better hardware to run checkpoint I would appreciate it? ASF claims to offload NAT and have filters to sense the traffic on the other hand Nokia+ CKP has smart defense...And ASF datasheet has much

[FW-1] LDAP Authentication

2004-08-17 Thread John Lindblom
We need to block access to the internet for certain users so I'm looking at the possibility of using NetWare eDir using LDAP to have user enter there login information to access the internet. Is anyone using this configuration if so was it very difficult to get working? Thanks, John Lindblom

Re: [FW-1] vrrp - dedicated interface

2004-08-17 Thread Thorsten Behrens
Sascha, I was just planing a small setup for an even smaller customer. My plan was to use two Nokia IP130's with Checkpoint Express, using VRRP for simple failover HA. Now my Checkpoint distributor raised his hand and Yeah, you can do that. VRRP the external, the LAN, and the DMZ. You'll

Re: [FW-1] SUSPECT: [FW-1] ASF or Nokia?

2004-08-17 Thread Daniel Fischer (J)
We have evaluated the Nortel ASF in June. I can tell you that the only negative that we found was the lack of a built-in sniffer (on the switch itself) since our current platforms are either Solaris or Linux and they come with either snoop or tcpdump. Other than that, the ASF performed

Re: [FW-1] vrrp - dedicated interface

2004-08-17 Thread Diotte, Shannon S.
Agreed. Also, the new VRRP setup is Microsoft easy.state sync is overrated, IMO. Nokias seem to run forever. -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] Behalf Of Thorsten Behrens Sent: Tuesday, August 17, 2004 11:15 AM To: [EMAIL

Re: [FW-1] vrrp - dedicated interface

2004-08-17 Thread Thorsten Behrens
[VRRP but no state sync] Agreed. Also, the new VRRP setup is Microsoft easy.state sync is overrated, IMO. Nokias seem to run forever. I wouldn't go _that_ far. These guys do fail now and then (the HD, mostly); but more importantly, there's always that next maintenance window to apply an

[FW-1] NAT Traversal and IPSec Pass Through

2004-08-17 Thread Bergin, Rob
Hi All, Anyone working with a Nortel Contivity VPN and Checkpoint NG AI? We put an additional adapter in our Checkpoint and have terminated a small wireless LAN into it. It's been great, users jump on the wireless, get assigned a DHCP IP from a DHCP appliance and then can surf the web. Now

Re: [FW-1] NAT Traversal and IPSec Pass Through

2004-08-17 Thread Diotte, Shannon S.
Hope I was clear, what I meant is UDP encapsulation is needed when using NAT-T since ESP packets don't use port numbers, Nortel Contivity doesn't support this. -Original Message- From: Diotte, Shannon S. Sent: Tuesday, August 17, 2004 3:45 PM To: 'Mailing list for discussion of

[FW-1] Whitelisting URIs

2004-08-17 Thread Crist Clark
We have been handed down a new policy that a certain set of computers will only be allowed HTTP access to a specific set of blessed web sites. We have been supplied with a set of URLs. I am trying to figure out the best way to do this within FW-1. I have been looking through the HTTP Security

Re: [FW-1] Inbound connections being NAT'd to firewall

2004-08-17 Thread Crist Clark
Brooks, George [Contractor] wrote: It seems that Checkpoint has a limitation that I did not have with my Raptor firewall. In the past, all incoming requests to our email server hid the address of the incoming mail server. This made it easy for us to prevent our email server from being used as a

Re: [FW-1] Whitelisting URIs

2004-08-17 Thread Ray
We're not and you hit the reason on the head: Akamai. Our ISP has one of their edge of the Internet caching boxes and although the URLthey're going to is to the big site, FW-1 shows the IP they're actually going to is on our ISPs network, the Akamai cache device. We stuck in a Microsoft ISA2000

Re: [FW-1] Not valid license

2004-08-17 Thread Jean-Paul Baillon
1. Attach the licence to the management server 2. Install the policy -Original Message- From: Salomé Reíllo [mailto:[EMAIL PROTECTED] Sent: Tuesday, 17 August 2004 4:43 PM To: [EMAIL PROTECTED] Subject: [FW-1] Not valid license Hi all, I am having a problem with Check Point Enterprise