Have you mesed with ASD at all, Chris? I'd like to use it but the
documentation is totally silent on what permissions the end user needs. This
usually means that the end user must be a local administrator, which we
don't allow. There's also no place to enter credentials for an
administrator-level account that I can find.
Any thoughts?
Ray
From: Chris Hoff <choff AT CORNERSTONESECURITY DOT COM>
Reply-To: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] ASD Server (Automatic Software Distribution)
Date: Fri, 28 May 2004 14:41:37 -0500
You do not have to have a separate license for the ASD server (as far as
I know), but you cannot push application/OS specific patches via the ASD
Server. The ASD Server is strictly for pushing new versions of the
SecureClient software to Remote Users. If you want to be sure they have
certain levels of Applications/OS Patches before they can connect to
your domain, you can use SCV (Secure Configuration Verification) for
that. The default settings you can check for within Check Point is
pretty slim, but you can get an OPSEC application to do the checking for
you.
Regards,
Chris
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Ruiyuan
Jiang
Sent: Monday, May 24, 2004 11:05 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] ASD Server (Automatic Software Distribution)
Hi, all
In the NG AI R55 VPN User's Guide, it talked about ASD server for
updates installation. In the manual, it says:
ASD feature enables administrators to automatically distribute
SecureClient packages in order to update existing SecureClient
installations.
SecureCleint periodically check for updates by sending its configuration
parameters (operating system, current version and service pack of the
client installed etc.) to an ASD server. If an updated package exists
for the profile, it can be automatically downloaded to the client in
order to update SecureClient.
Can I put Microsoft patches, Mcafee Virus scan's DAT file update, etc.
on the ASD server alone without packaged (in the event of new worm,
virus comes out, we put Mcafee's DAT file onto ASD server for remote
user to download)?
My policy server in on my firewall gateway. Can I install ASD server on
my firewall gateway (My SmartCenter server is on a different box,
distributed configuration). Since ASD is part of policy server
installation, I guess I don't need to have a separate license for it,
right? Thanks.
Ryan Jiang
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options,
email fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
_________________________________________________________________
Best Restaurant Giveaway Ever! Vote for your favorites for a chance to win
$1 million! http://local.msn.com/special/giveaway.asp
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
