Install the SecureClient Packaging Tool on your management server and use it
to create a customized install of SecureClient. One of the options is to
remove the ability of the end user to disable the security policy. It's a
real nice tool for creating a customized installation executable set up with
the options and lockdowns you want.
Ray Pesek, CISSP
From: Justine Dumur <jdumur AT ELV.ENIC DOT FR>
Reply-To: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] FW1 : SCV on NGAI
Date: Wed, 17 Dec 2003 17:24:45 +0100
Hello,
I want to disconnect my VPN connexion between SecureClients and my NGAI
server
as soon as the CheckPoint firewall is desactived.
For example, a user establishes a vpn connexion between his SecureClient
and
our NGAI server, he makes authentication and loads the security policy.
Then
he clicks on "logoff from the policy server", the vpn goes on but the
checkpoint firewall is set to default. I want to kill the vpn connexion as
soon as the firewall is desactived.
How can I do it ?
Justine
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
_________________________________________________________________
Working moms: Find helpful tips here on managing kids, home, work ? and
yourself. http://special.msn.com/msnbc/workingmom.armx
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|