I'd like to refer you to custom made SCV Plug In Developed bye OPSWAT (
www.opswat.com )
which I am running
OPSTOP SCV for Norton Antivirus ,
Info :
http://www.opswat.com/opstop_nav.html
OPSTOP SCV for Hardware Identity protects your corporation against unwanted
hardware access by binding SecureClient to your corporations'
hardware and authenticating each hardware access to your corporate network.
Info :
http://www.opswat.com/opstop_hardware.html
Best
Benny
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM]On Behalf Of Wayne Ho
Sent: Friday, May 09, 2003 3:27 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] Policy Server and SCV help needed!
You should start with
Outbound policy: accept all
Inbound policy: non-internal domain -> any BLOCK
If user have 2 PC/laptop at home, be aware that they
may not be able to copy files in between. Make sure
communicate well with end users.
Wayne
--- Serge Vondandamo <svondandamo AT MERCURY-EUR DOT COM>
wrote:
> Hi gurus,
> In the next few days, I will start deploying Policy
> Server in our offices
> around the world.
> The most crucial part of deploying a policy server
> is to define a correct
> policy to it. This policy will be imposed on remote
> user's machines.
> The policy should define which services and
> connection types will be allowed
> to reach remote user's machines and to get out of
> those machines.
> As we have many types of users and many types of
> demands, this task can be
> quite complicated.
> We need to try and define which services each user
> will use (both inbound
> and outbound).
> By doing that, we will try to define a correct
> policy and to create a
> relevant user's groups for different imposed
> policies
>
> I need help/recommendations from those who have
> already deploy such Policy
> in larger organization.
> These kinds of services can be different to various
> types of users. we have
> Sales_Users,
> Presales_users,Administration_Uesrs,IT_Users and
> Managers_Users.
> In addition I need to get your opinion about the SCV
> (Secure Configuration
> Verification), what should we check (Service packs
> only, System services,
> patches, etc)?
>
> Thanks for your input.
> Regards
> Serge
>
>
>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
__________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo.
http://search.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
