Hi,
On Mon, 2006-05-29 at 16:32, sin wrote:
> Colin Campbell wrote:
> > Hi,
> >
> > On Sat, 2006-05-27 at 02:50, sin wrote:
> >> Ramki Security wrote:
> >>> Checkpoint being an IP firewall, doesn't work on MAC address. Hence I
> >>> don't think there is a way to do this. By the way, why you wan
Colin Campbell wrote:
> Hi,
>
> On Sat, 2006-05-27 at 02:50, sin wrote:
>> Ramki Security wrote:
>>> Checkpoint being an IP firewall, doesn't work on MAC address. Hence I
>>> don't think there is a way to do this. By the way, why you want to do
>>> this?
>> one reason would be to want to filter
Hi,
On Sat, 2006-05-27 at 02:50, sin wrote:
> Ramki Security wrote:
> > Checkpoint being an IP firewall, doesn't work on MAC address. Hence I
> > don't think there is a way to do this. By the way, why you want to do
> > this?
>
> one reason would be to want to filter traffic based on mac addres
Concepcion, Juan wrote:
> If you end goal is the have traffic from only max a.b.c.d.e.f to have
> access to the internet then you use Checkpoint as part of a complete
> security solution. You tie mac a.b.c.d.e.f to ip address x.x.x.x and
> then create an appropriate security policy to allow that a
Short answer is no.
With Check Point Firewall-1, you cannot create an object with MAC address, but
with another Check
Point spin-off, MetaInfo's SafeDHCP and SafeDNS you can control endpoint access
at layer 2. You
may add Check Point Integrity Clientless Scan or AD/LDAP authentication to the
pi
@AMADEUS.US.CHECKPOINT.COM
Subject: Re: [FW-1] mac address
Ramki Security wrote:
> Checkpoint being an IP firewall, doesn't work on MAC address. Hence I
> don't think there is a way to do this. By the way, why you want to do
> this?
one reason would be to want to filter traffic based on mac address
Ramki Security wrote:
> Checkpoint being an IP firewall, doesn't work on MAC address. Hence I
> don't think there is a way to do this. By the way, why you want to do
> this?
one reason would be to want to filter traffic based on mac address
(let's say: I want only traffic from a.b.c.d.e.f mac to
Checkpoint being an IP firewall, doesn't work on MAC address. Hence I
don't think there is a way to do this. By the way, why you want to do this?
Ramki
CCNA, CCSE-NGAI
Roberto González Sagredo wrote:
Hi,
I would like to know if it is possible to create objects in Firewall-1 VPN
Pro based on
Hi,
I would like to know if it is possible to create objects in Firewall-1 VPN
Pro based on its MAC address instead of its IP number.
Regards
___
Roberto González Sagredo
Director de Sistemas
mailto:[EMAIL PROTECTED]
ComuNET S.A.
Gral. Concha 39,6º
48012 Bilbao E
Hi,
I would like to know if it is possible to create object in Firewall-1 VPN
Pro based on its MAC address instead of its IP number.
Regards
___
Roberto González Sagredo
Director de Sistemas
mailto:[EMAIL PROTECTED]
ComuNET S.A.
Gral. Concha 39,6º
48012 Bilbao Es
| for discussion of Firewall-1 |
| ||
|-+>
>---
---|
|
|
| To: [EMAIL PROTECTED]
|
|
>>What are you using to maintain the user names, are you authenticating
>>against AD?
Surfcontrol can use AD (Mixed mode), NT Domain, NDS, and Netbios discovery.
There is a EUM (service) that gets installed onto each primary/backup/AD.
We are using the AD in mixed mode. Netbios discovery is tur
|
| To: [EMAIL PROTECTED]
|
| cc:
|
| Subject: Re: [FW-1]
>>Rutherford, Robert
>>Sent: Monday, July 12, 2004 3:13 AM
>>I wouldn't advise blocking MAC addresses Also seems to be a bit of
>>admin nightmare.
>>Why not use an authentication method, i.e. User or Session auth?
>>Or put in an authenticating proxy and allow that access
I have to agree here.
t: 11 July 2004 17:09
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] MAC Address Blocking
John,
Try giving the PCs in question a DHCP reservation on your DHCP server,
then block them by IP address on the FW-1.
Chris
-Original Message-
From: Mailing list for discussion of Firewall-1
[mailto:[
: [EMAIL PROTECTED]
Subject: [FW-1] MAC Address Blocking
It looks like Checkpoint has eliminated the User Forums on there site so
this looks like the new discussion forum.
Anyone have any recommendation for blocking internet access to certain
PC's by the MAC address? Firewall-1 only blocks by
EMAIL
PROTECTED]
Sent by: Mailing list forcc:
discussion of Firewall-1 Subject: Re: [FW-1]
MAC Address Blocking
<[EMAIL PROTECTED]
KPOINT.COM>
I guess that you want a solution for a DHCP environment right?
If the last is true, why you don't use session agent? this can give
user access to the services that they need in the gateway.
Regards!
Alejandro Flores Mendoza
C I T I
Sendero Sur # 285 Col. Contry
Monterrey Nuevo Leon, Mexico
It looks like Checkpoint has eliminated the User Forums on there site so
this looks like the new discussion forum.
Anyone have any recommendation for blocking internet access to certain PC's
by the MAC address? Firewall-1 only blocks by IP so I would have to
manually assign addresses to a bunch o
19 matches
Mail list logo
