Re: [FW-1] How are SSL VPNs safer than IPSec?

2008-06-17 Thread Eugeniu Patrascu
Ray wrote: I have never understood the statement that SSL VPNs are inherently safer. Would someone please tell me why you think they are? I've used Connectra and Juniper Secure Access. In both systems you're simply limiting what the source can get to based on rules for the destination. It's

Re: [FW-1] How are SSL VPNs safer than IPSec?

2008-06-17 Thread Stephen JT Bourike
In response to Eugeniu Patrascu's post: SecureClient can easily be installed to prevent a user from having access to the policy unload options. SC and the SSL Network Extender/Connectra also integrate directly with the Check Point Integrity product, allowing the same kind of checks and

Re: [FW-1] Checkpoint R62 vs CiscoASA 5505

2008-06-17 Thread Miguel Hernandez y Lopez
Thnsk to all for the answers, i´ll implement all the suggetions. Miguel --- On Fri, 6/13/08, Juraj Sakala [EMAIL PROTECTED] wrote: From: Juraj Sakala [EMAIL PROTECTED] Subject: Re: [FW-1] Checkpoint R62 vs CiscoASA 5505 To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Date: Friday,

Re: [FW-1] Problem with adding a new node to Cluster XL

2008-06-17 Thread Mark Senior
Hello Edouard Did you gain any insight into the problem described below? I had more or less the same problem when rebulding one node of a SPlat cluster after a failed upgrade. As soon as SIC was complete between the rebuilt node and the manager, neither node saw the other, and both tried to

Re: [FW-1] How are SSL VPNs safer than IPSec?

2008-06-17 Thread Mark Senior
Between the inherent security of IPSec and SSL VPNs, I have not been able to discern any difference that didn't come down to marketing. IPSec VPNs rely on client installed software, which software is typically available for most common client OSes (anything outside of Windows, Mac, and one or two

Re: [FW-1] How are SSL VPNs safer than IPSec?

2008-06-17 Thread Eugeniu Patrascu
Stephen JT Bourike wrote: In response to Eugeniu Patrascu's post: SecureClient can easily be installed to prevent a user from having access to the policy unload options. SC and the SSL Network Extender/Connectra also integrate directly with the Check Point Integrity product, allowing the same

[FW-1] Standalone to ClusterXL

2008-06-17 Thread Crist Clark
We are getting a NGX R65 SPlat firewall a friend. We will be going from a single enforcement module to a two member ClusterXL. I'm looking for a guide or procedure, preferably from Check Point, on how to migrate from a single firewall to a cluster. The R65 Upgrade Guide and the R65 ClusterXL

[FW-1] Drivers for R60?

2008-06-17 Thread Chris van der Merwe
Hi Guys, We have 2 x HP dl380g5 boxes in a cluster. I am trying to downgrade our R65 installation to R60 because we need to use the IPv6 Pack. However when I run the installation of SecurePlatform for R60 on these boxes, it says my hardware is unsupported because SecurePlatform R60 does not