Dynamic Interface...I must have it enable?
Saludos,
Mateo Cabrera - Soporte Técnico
Security Advisor
www.sadvisor.com
-----Mensaje original-----
De: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM]En nombre de Reinhard
Stich
Enviado el: miércoles, 26 de mayo de 2004 16:33
Para: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Asunto: Re: [FW-1] SecuRemote behavior, URGENTEEEEEE...PLEASE...!!!
hi,
please check if you have dynamic interface resolving enabled (first you
need to enable it in the global properties and then on the module-object)
cheers
reinhard
At 17:54 26.05.2004, you wrote:
>Hi, guys...
>
>I´ve a strange problem with securemote...
>The environment is this:
>
>I´ve a NOKIA IP330 with IPSO 3.7, and NG_AI_R55 HFA_03 (In StandAlone mode,
>this is EnforcedModule+SmartCenterServer in a same appliance)
>This appliance have 5 interfaces, 2 of these are defined as EXTERNAL, one
to
>Internet and the other to dedicated connection.
>
>The SecuRemote clients does to connect through the both INTERNET and
>DEDICATED interfaces...the SecuRemote licence are associated to the
Internet
>address (Public IP).
>
>For the SecuRemote clients that try to connect incoming to the firewall on
>the Dedicated Interface, it works fine.
>But for the clients with SecuRemote that try to connect incoming to the
>firewall on the Internet Interface, there are problems...the IKE and
>FW1_Topo entries are the only that i see in the SmartView Tracker.
>However...and this is the interesting part...!!!, some clients from
Internet
>connect themselves without problems.
>
>NOTE: All this began to happen when I applied the HOT_FIX_03....
>I´dont known, but is very strange...
>any ideas?
>
>Regards...
>
>Saludos,
>
>Mateo Cabrera - Soporte Técnico
>Security Advisor
>www.sadvisor.com
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERV AT amadeus.us.checkpoint DOT com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
><http://www.checkpoint.com/services/mailing.html>http://www.checkpoint.com/
services/mailing.html
>
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-owner AT ts.checkpoint DOT com
>=================================================
--
Reinhard Stich ASSIST R.Stich AT internet-security DOT at
Internet Security AG, 1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
