And the trick is .....
Push the security policy after editing ipassignment.conf
Ray Pesek, CISSP
From: Ray Pesek <sixsigma44 AT HOTMAIL DOT COM>
Reply-To: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] ipassignment.conf - What's the trick?
Date: Thu, 29 Jan 2004 16:14:20 -0500
Hi,
I'm trying to use the ipassignment.conf file on R55 in $FWDIR/conf on the
enforcement module to assign particular users a discrete Office Mode IP
address. Everyone authenticates by certificate against the Check Point ICA.
I've tried about every syntax permutation I can think of but the file just
doesn't do anything. The "vpn ipafile_check ipassignment.conf detail" check
shows no errors. I even copied and pasted the certificate CN= thing out of
the certificate "view" and it won't work.
Ray Pesek, CISSP
_________________________________________________________________
Find high-speed ?net deals ? comparison-shop your local providers here.
https://broadband.msn.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
_________________________________________________________________
Check out the new MSN 9 Dial-up ? fast & reliable Internet access with prime
features! http://join.msn.com/?pgmarket=en-us&page=dialup/home&ST=1
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
