... you don't need to install the security policy because this file is
installed on the module not on the management !
-----Original Message-----
From: Ray Pesek [mailto:sixsigma44 AT HOTMAIL DOT COM]
Sent: Freitag, 30. Januar 2004 03:07
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] ipassignment.conf - Here's the trick
And the trick is .....
Push the security policy after editing ipassignment.conf
Ray Pesek, CISSP
>From: Ray Pesek <sixsigma44 AT HOTMAIL DOT COM>
>Reply-To: Mailing list for discussion of Firewall-1
><FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
>To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
>Subject: [FW-1] ipassignment.conf - What's the trick?
>Date: Thu, 29 Jan 2004 16:14:20 -0500
>
>Hi,
>
>I'm trying to use the ipassignment.conf file on R55 in $FWDIR/conf on
>the enforcement module to assign particular users a discrete Office
>Mode IP address. Everyone authenticates by certificate against the Check
Point ICA.
>
>I've tried about every syntax permutation I can think of but the file
>just doesn't do anything. The "vpn ipafile_check ipassignment.conf
>detail" check shows no errors. I even copied and pasted the certificate
>CN= thing out of the certificate "view" and it won't work.
>
>Ray Pesek, CISSP
>
>_________________________________________________________________
>Find high-speed 'net deals - comparison-shop your local providers here.
>https://broadband.msn.com
>
>=================================================
>To set vacation, Out-Of-Office, or away messages, send an email to
>LISTSERV AT amadeus.us.checkpoint DOT com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your subscription options,
>email fw-1-owner AT ts.checkpoint DOT com
>=================================================
_________________________________________________________________
Check out the new MSN 9 Dial-up - fast & reliable Internet access with prime
features! http://join.msn.com/?pgmarket=en-us&page=dialup/home&ST=1
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
