or the name of the
cluster?
Where do I put the certificates after...?
etc etc.
thanx in advance
Paul
C. Paul Simons
Corporate Network Security Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
C. Paul Simons
Corporate Network Security Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
Does anybody have any pointers to a good 'Security Standards'
documentation,
you know the sort of stuff;
Why Security?
What security?
Why FireWalls?
Why Cluster?
Paul
C. Paul Simons
Corporate
C. Paul Simons
Corporate Network Security Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
You could probably use cron but why would you want to...
use the time field in the policy editor to make active at certain times.
C. Paul Simons
Corporate Network Security Services
IHS Energy Group
)
C. Paul Simons
Corporate Network Security Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
?
and I was also wondering if the DNS mess on the Internet at the moment was
making the difference?
If none of the above can somebody explain this
thanks
Paul
C. Paul Simons
Corporate Network Security
?
and I was also wondering if the DNS mess on the Internet at the moment was
making the difference?
If none of the above can somebody explain this
thanks
Paul
C. Paul Simons
Corporate Network Security
(create an "empty" HTTP ressource and use that) most "tunnelled"
protocols won't be able to pass through the gateway.
How do you set up this 'empty' resource?
----
C. Paul Simons
Corpor
C. Paul Simons
Corporate Network Security Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
Has anyone managed to do a TCP/IP login to and NDS tree from a dial-up
system running Securemote?
If so how did you do it?
Paul
C. Paul Simons
Corporate Network Security Services
IHS Energy Group
C. Paul Simons
Corporate Network Security Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
Yes - do a static NAT and let FW1_topo and FW1_ClientAuth through to it
If you have a problem try defining a new object with the NAT'ed address of
your MS and put it in the same rule.
Paul
C. Paul
. Paul Simons
Corporate Network Security Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
To unsubscribe from this mailing list
Please delete this email from you list - I keep getting this reply
C. Paul Simons
Corporate Network Security Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax
http://www.enteract.com/~lspitz/armoring.html
C. Paul Simons
Corporate Network Security Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Thank for the replies:
It was the upgrade which over wrote the crypt.def file.
Paul
C. Paul Simons
Corporate Network Security Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct
I have just upgraded from 4.1 SP2 to SP3.
I was able to do an NSLOOKUP from the securemote client to the internal DNS
server.
No longer works!
Anybody know why?
Paul
C. Paul Simons
Corporate Network
Hi Sun Yu
Yes I did use the 'server' option to point at the internal DNS system.
It worked before - not now.
Any ideas?
Paul
C. Paul Simons
Corporate Network Security Services
IHS Energy Group
This has been asked before - and I filed it safe somewhere - but I need to
block access to cutefx.com in a hurry.
Answers please.
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group
and rules. I would prefer a cleaner way - if there is one.
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
be
able to use their Novell account.
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748
it - they succeeded (if somebody has this link please
re-post it - I lost it)
Regards
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
I have lots of experience with the software and with BT.
A good place to start would be to dump BT as we did :-)
...seriously a good place to start would be to try another ISP?
Paul
C. Paul Simons
it - they succeeded (if somebody has this link please
re-post it - I lost it)
Regards
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
in the CP VPN documentation - on the installation CD or
WEB site.
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303
It might seem a dumb question but do you have a license?
Check what (if) errors are appearing in FWDIR/log/*.elg
Do a stop/start check again.
Paul
C. Paul Simons
Corporate Network Services
IHS Energy
To all third party vendors who are willing to give their (free) time to
answer our questions:
Please don't stop!!!
To people who don't want to read them:
Use the delete key !
Paul
C. Paul Simons
It better be! that is one of the main reasons we bought it.
Where is the official denial?
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct
long as I use anything
except DSL which is why I am following this thread so closely.
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736
Do you have a default route (statically configured) on you firewalls?
I had this once and that seemed to cure it.
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main
I have a HA (2 firewalls) and a separate Management console
Which machines should this go on?
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
the 'heatbeat' (as we do) then
you need an additional line
...
control = sbif1
...
You should also be running FW-1 in 'sync' mode.
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO
in the fw state tables. It is safe to ignore these
messages, and no performance loss is incurred.
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
To unsubscribe from
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
You should contact your reseller - assuming you have the right support
contract :-)
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736
Trying to do the same thing - so I am also interested to hear the horror
stories.
The only thing I know for certain is that you have to use IKE - it will not
work with FWZ.
Paul
C. Paul Simons
.
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
To unsubscribe from
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
will not work properly
through the VPN/FireWall Module
in a configuration where domain name is used to specify host address rather
than a dotted-decimal IP
address.
C. Paul Simons
Corporate Network Services
IHS
to upgrade ?
Paul
PS: I have the added 'fun' of two machines running StoneBeat.
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1
shut off all but one server, so it
looks like FW-1.
Anybody else seen this?
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
- Forwarded by Paul Simons/Den
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
To unsubscribe from this mailing
.
Thanx
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
To unsubscribe from this mailing
I am running my management console on a Sun box.
Can somebody tell me how to reduce the font size in the log viewer window.
It must be an X-windows variable but I can't find it.
Cheers
Paul
C. Paul
I am trying to get by without the AMC - integrating with NDS also.
I'll keep you informed... :-)
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Go here...
http://www.phoneboy.com/fw1/docs/4.0-summary.html
and search on 'udp_rejects'
Thanks again to phoneboy ...!!
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood
read all the phoneboy stuff and anything else I could get my hands on.
Has anybody managed to get this to work?
Paul
-
---
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242
To unsubscribe from
to activate on the 1 interface ONLY for the
internal network?
In other words how can I get my internal machines to get to the DMZ's without
being NAT'ed?
Paul
C. Paul Simons
Corporate Network Services
IHS Energy
Has anybody managed to get FW-1 running under Windows 2000? I know its not
supported but I was just wondering... :-)
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main
or post here. I would like to know how you did it.
Thanx
Paul
C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.
Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
the resources.
Were there any recommendations for add-on products to run on the Firewall box?
I don't want a full blown discussion again just a summary - please.
Paul
C. Paul Simons
Corporate Network Services
61 matches
Mail list logo