Set "block on unverified" to "true" in the local.scv file. It's a global
setting, meaning that if any of the SCV checks are unverified, the
connection is blocked. They can connect to the gateway and get
authenticated, but they can't go anywhere.
Ray
From: Chontzopoulos Dimitris <dchontzo AT ABC DOT GR>
Reply-To: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] Anti-Virus through SecureClient NG
Date: Wed, 23 Jun 2004 13:08:33 +0300
I don't understand exactly what is it that you want to do, but, McAfee has
released VirusScan v7.1.0 which includes a plug-in for
Secure Client.
::Quote:: (ReadMe.txt from VirusScan v7.1.0)
- Check Point(TM) VPN-1/Firewall-1R SCV
integration. The VirusScan Enterprise
software has been updated to integrate with
Check Point VPN-1/Firewall-1 SCV. When
installed and enabled, the Check Point
product can be configured to prevent clients
without up-to-date anti-virus protection
from accessing the corporate network through
the VPN.
I don't know though how on earth "the Check Point product can be configured
to prevent..."!!! Maybe your client's McAfee retailer is
a good place to start asking questions or McAfee knowledge base (though
you'll need a username/password to access that).
Hope this helps.
Cheers,
Dimitris
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Brett,
Gary
Sent: Wednesday, June 23, 2004 12:17 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] Anti-Virus through SecureClient NG
Hi there
My client is using secureclient through NG FP3 HF2 using IP pool, I have a
Mcafee anti virus server sitting inside the lan and i am looking for a way
to get it talking to the secure clients when they are connected. I just
wanted to find out whether any of you guys have an internal LAN AV server
(not in DMZ) pushing updates to secure client boxes when they log in. Any
advice on how to configure this or what products you have been able to get
working would be greatly appreciated
cheers
Gary
-----------------
This electronic message contains information from Cetelem UK Credit Ltd
which may be privileged or confidential. The information is intended to be
for the use of the individual(s) or entity named above. If you are not the
intended recipient be aware that any disclosure, copying, distribution or
use of the contents of this information is prohibited. If you have received
this electronic message in error, please notify us by telephone or email
(to
the numbers or address above) immediately.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
_________________________________________________________________
FREE pop-up blocking with the new MSN Toolbar ? get it now!
http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
