[FW-1] Automatic Proxy detection / authentication

Hi, Listreaders, Is it possible to let Firewall-1 listen and handle Internet explorer's Automatic LAN settings detection ? This way I can for example create a LAN where clients start a browser, gets client authentication from the Fw, and then do as authorized? If so, Where can this be

[FW-1] Losing ARP-Entrys of NAT-Hosts on Nokia IP380

Hello, i have a Nokia IP380 with IPSO 3.7.1-B016 and CP VPN-1 FW-1 NG with AI (R55) HFA_08. After 3 to 8 days the ARP-Entrys for ALL hosts with NAT (static or hide) will be lost ! After re-installing the policies arp -na lists the ARP-Entrys and the hosts with NAT will work again. Does anyone

Re: [FW-1] Losing ARP-Entrys of NAT-Hosts on Nokia IP380

You have to do manual proxy arps. If there is an interface flap and you are using automatic proxy arps they will disappear. CP claims to be fixing this in the next major release. -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Kai

[FW-1] SecureClient LDAP

Has anyone setup their secure client to authenticate against LDAP? I'm running a Sun One Directory Server v5.1 and have only found decent setup guides for M$. Any ideas where to start? I'm currently authenticating secure client users against the local checkpoint database. Thanks in advance.

[FW-1] checkpoint r55 and vlan interfaces

Hi, I have CheckPoint R55 on SPLAT and I have some dificulties removing an interface from it. Original setup was like this: eth0 - 192.168.x.y (internal lan) eth1 - x.y.z.q (to the internet) (provider A) eth2 - a.b.c.d (to the internet) (provider B) After switching providers, the setup is like

[FW-1] Tunnel test failure.

I am having a problem with my VPN setup which is that at times i used get the following message if we try to give an attempt of Active Test from client side: Tunnel Test failure, Suggestion: Try to check the Force NAT traversal mechanisms (UDP encapsulation) check box Please note that it does

[FW-1] Strange Behavior - JavaScript coming across VERY Slow on NGAI not 4.1 though

All, Very strange behavior. We have an application that when we connect the server behind an NG AI firewall, the table that is built with JavaScript takes forever to build. Same machine placed behind out old Checkpoint 4.1 on Windows NT firewall runs as it does on the local machine. FAST. Any

Re: [FW-1] Setting up a DHCP relay across an FW-1 R55 firewall

Scott Tobias wrote: I have only seen this done on IPSO and on that platform it required a bootp helper so my guess is you would have to install one on your Linux box Thanks for the info. So, I've installed dhcrelay on the firewall, and I'm running dhcrelay -i eth0 -i eth5 172.17.0.21 where eth0

[FW-1] Check Point User Group Meeting February 8th In Santa Clara

Hello Members of the Check Point User Community, Our next Check Point User Group meeting will be Tuesday, 2/8 at the Nortel Networks Cafeteria on Great America Parkway in Santa Clara. Here's the detailed meeting announcement: http://www.cpug.org/monthly_meeting_announcement.htm To see our

Re: [FW-1] Strange Behavior - JavaScript coming across VERY Slow on NGAI not 4.1 though

Check your SmartDefense settings for the server you're protecting. If you have a SmartDefense setting active that invokes security servers, that would explain the slowness you're seeing. -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] Behalf

Re: [FW-1] Checkpoint Hardening Guard on Win2k

http://www.rtek2000.com/Tech/InternetSecureLinks.html#hard Best regards, Roman M. Zeltser, @National Computer Center DPCMB/DOCPM, RSIS -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Brandon Liew Sent: Monday, January 24, 2005

[FW-1] loggin on Splat via serial console

Hi all Does anybody succeed to log on SecurePlatform AI_R55 via serial console ? If yes, what to configure ? Thanks for answers Bertrand = To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the

[FW-1] Changing the password on the Policy Editor

Due to personnel changes, I need to change the firewall password. Can I do this from within Policy Editor, or is there another way to do this? Thanks, Jeff. = To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in

Re: [FW-1] Tunnel test failure.

Yeah, we've seen this as well. The solution is to implement Visitor Mode. Every place where we had a tunnel test failure only and everything else looked OK got fixed when Visitor Mode was used. Ray From: Syed Abdul Hameed [EMAIL PROTECTED] Reply-To: Mailing list for discussion of Firewall-1

Re: [FW-1] Setting up a DHCP relay across an FW-1 R55 firewall

David Landgren wrote: Scott Tobias wrote: I have only seen this done on IPSO and on that platform it required a bootp helper so my guess is you would have to install one on your Linux box Thanks for the info. So, I've installed dhcrelay on the firewall, and I'm running dhcrelay -i eth0 -i eth5

Re: [FW-1] Checkpoint 4.1 any build

I've got the CD at home. -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Robert Fowler Sent: Thursday, January 27, 2005 4:23 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: [FW-1] Checkpoint 4.1 any build

Re: [FW-1] Changing the password on the Policy Editor

cpconfig for the Checkpoint password. Go through Voyager to change the IPSO admin password if you are running on a Nokia. Christian -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Jeffrey Engle Sent: Friday, January 28,

[FW-1] Routing a single public IP to multiple servers using subdomains

I'm attempting to help out network adminstrator figure out how, or if, we can rout traffic coming to a single public IP to two different servers inside our network by subdomain. For instance, we want www.site.com and www2.site.com to have the same A record which send requests to the same

Re: [FW-1] Changing the password on the Policy Editor

Use the webgui https://firewalladdress -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Jeffrey Engle Sent: Friday, January 28, 2005 12:03 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: [FW-1] Changing the password on

Re: [FW-1] CPMAD .exe

I did a search on CPMAD.EXE on a search engine and there was a lot of hits with useful information, I saw some that were not releasing memory maybe this is related, Try doing a search and good luck - Original Message - From: Jason Cameron [EMAIL PROTECTED] To:

Re: [FW-1] VPN setup between FW1 and Lynksys

I have a problem with VPN setup between my FW1 NG R55 and the client Lynksys BEFVP41 (domain encrypt)- FW1- Internet - Lynksys - Lynksys Net The problem is that the vpn only works when I configure just only one host in REMOTE GROUP on the Lynksys BEFVP41 client I need to reach all the networks

[FW-1] SmartDefense

I have NG FP3 on Window NT machine. I signup for SmartDefense 30 eval. Where should I do the update from the SmartDashboard? Under the Policy/SmartDefense, the Update SmartDefense button is greyed out. Thank you. BJ = To set vacation,

Re: [FW-1] VPN setup between FW1 and Lynksys

Can Linksys BEFVP41 support a Site to Site VPN ? Try enable/Disable Support Key exchange for Subnets on the Advance VPN properties in the Interoperable Devices Definition on your Checkpoint FW If you still having problem then Search on Checkpoint on how to disable Super netting...that can

Re: [FW-1] NAT and VPN

Yes, with SecureClient you can use NAT Transversal, enable support NAT transversal in gateway properties under RemoteAccess tab, and see connectivity enhancements in SecureClient, also see IKE over TCP support in your Managment server under Global Properties menu. Regards Romey Valadez

Re: [FW-1] Changing the password on the Policy Editor

Thank you. That worked. -Original Message- From: Christian Chiaverini [mailto:[EMAIL PROTECTED] Sent: Friday, January 28, 2005 2:48 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: Re: [FW-1] Changing the password on the Policy Editor cpconfig for the Checkpoint password. Go

Re: [FW-1] SmartDefense

The license should unlock that. - Original Message - From: Bernard Jen [EMAIL PROTECTED] To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Sent: Friday, January 28, 2005 3:35 PM Subject: [FW-1] SmartDefense I have NG FP3 on Window NT machine. I signup for SmartDefense 30 eval. Where

Re: [FW-1] Routing a single public IP to multiple servers using subdomains

Do you want share 1 public IP for two servers?? if this your case maybe CheckPoint ConnectControl can help you for load balancing. http://www.checkpoint.com/products/connectcontrol/ -Mensaje original- De: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] nombre de

Re: [FW-1] Routing a single public IP to multiple servers using subdomains

Asendorf, John wrote: I'm attempting to help out network adminstrator figure out how, or if, we can rout traffic coming to a single public IP to two different servers inside our network by subdomain. For instance, we want www.site.com and www2.site.com to have the same A record which send

[FW-1] VPN problem

Hi all, I have configured VPN on checkpoint firewall NG AI (55) for remote users. It's working fine for one of our internal networks. But not for all the Networks. Our network diagram: MELB OFFICE(192.168.6.0)--(192.168.6.254)MELB ROUTER(10.1.1.4)-- (10.1.1.1)SYD

Re: [FW-1] Static Route

Hi CP Gurus, I had a checkpoint nokia 530 box and having some problem to configure the static route. I had more than 80 route to add. do u guys know any shortcut to add the route instead adding line by line on the voyager. I mean something like cisco pix firewall where u can copy and paste

Re: [FW-1] Static Route

I also have the nokia ip 530. What I ended up doing is seting it up to receive. Ospf updates instead of creating static routes for about 120 routes. You may want to consider that. Although it's less of a security risk to me since its an internal firewall not exposed to the internet. I would

Re: [FW-1] Static Route

Re: [FW-1] Static RouteWe tried to do ospf on an ip440 back around ipso 3.2 and it failed miserably, so we've been dealing with ~100 static routes ever since. We continue to use static routes on our 530 today. Yes, it can be a simple cut paste. Keep a file with your routing info. It also

Re: [FW-1] Static Route

The initial file contains all the system settings that are created by voyager. You can attempt to add the static entries, however I would definitely make a backup of the original initial file. I believe the file is in the /config/db directory. Im sure that checkpoint and nokia would not