[FW-1] Proxy ARP Once more...

2006-02-24 Thread Gaston Serralta
Hi! I ran out of ideas... I´ve a W2000 SP4 box with NG R55 HFA014 and i want to publish my mail relay and a web server. As you know Automatic Proxy ARP does not work and i can´t publish my servers on the internet. -The Automatic ARP configuration check box is on -I´ve automatic NAT rules -I´ve

Re: [FW-1] Proxy ARP Once more...

2006-02-24 Thread Brockhoven, Werner
Hi, You can always add some extra routes: - on the external router, public ip - firewall ip - on your firewall, public ip - private ip Regards, Werner -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Gaston Serralta Sent:

Re: [FW-1] Proxy ARP Once more...

2006-02-24 Thread Gary Scott
Granted CP has had its issues with auto proxy arp but I have this working on win2k sp-4 r-55-hfa-11. You need to do one or the other, local.arp or auto, it is not until NGX that you can merge manual and auto proxy arps. If you can't get the proxy arp function to work then add a simple static

[FW-1] Core Dumps

2006-02-24 Thread Satyam Mathura
Hey Guys: Are core dumps enabled by default on an InterSpect 2.0 device / SecurePlatform? If not, then how can we enable it? Thanks. = To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the

Re: [FW-1] Core Dumps

2006-02-24 Thread sin
Satyam Mathura wrote: Hey Guys: Are core dumps enabled by default on an InterSpect 2.0 device / SecurePlatform? If not, then how can we enable it? Thanks. ulimit -c 0 should work. = To set vacation, Out-Of-Office, or away messages,

[FW-1] NOKIA AND NGX

2006-02-24 Thread Alvaro Gastambide
Hi, i need a firewall to make 500 VPN site to site What nokia and check point do you recomend ? Thanks Alvaro Gastambide = To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set

Re: [FW-1] NOKIA AND NGX

2006-02-24 Thread Reinhard Stich
hi, 500 site2site VPNs? how many simultaneous? what bandwidth? many VPNs consume far more load on the system than just one or two. so if you have (or expect) many VPNs I recommend a clustered (load sharing = IP clustering) environment with IP1260 or more. but - as I said - depends on how

Re: [FW-1] NOKIA AND NGX

2006-02-24 Thread cisco4ng
Hi there, If you are looking at 500 site-to-site VPNs, I would highly recommend that you go with Cisco VXR7206 router. With Cisco devices, you can terminate a lot of site-to-site VPNs. Furthermore, if you have requirements to run dynamic routing protocols over IPSec tunnel, Cisco

Re: [FW-1] NOKIA AND NGX

2006-02-24 Thread Khan, Irfan
We use a Nokia 350 with 600 users. It has 512 RAM. We are using NG AI 55. I have heard NGX is more resource intensive and needs around 1 GB RAM for better and faster performance -Original Message- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of

Re: [FW-1] NGX advice

2006-02-24 Thread Reinhard Stich
hi, performance is a matter of features turned on or off. there are features that boost the performance (secureXL, flows) and there are features that make your network more secure but consume a lot of performance (smartdefense, layer-7-checks). cheers reinhard At 22:38 24.02.2006, you

[FW-1] NGX advice

2006-02-24 Thread Ramakrishnan Pillai
Hi FW-1 Gurus, We are planning to migrate to NGX and would like to know if there is any issues, tips I should be aware for a smoother migration. We have R55 on SPARC Solaris 9. I have also heard that NGX will give more performance than R55. Is it true? Any information will be helpful.