Firewall-1

[FW-1] disabling a security policy in cli mode

Subject: [FW-1] disabling a security policy in cli mode
From: "Steiner, Stephan" <Stephan.Steiner AT NEXTIRAONE DOT CH>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Tue, 29 Jun 2004 13:30:13 +0200
Hi



I noted that in GUI mode, a security policy can easily be disabled by
clicking Tools - Disable Security Policy.

I've written an application that automatically initializes a VPN connection
using SecureClient's commandline mode (scc.exe). scc.exe does offer a
command to switch off a policy "scc sp off", yet all I get when trying to do
this is a "This operation is denied by current settings." Error message. Now
I'm wondering what the heck those current settings are, as I can disable the
policy in GUI mode just fine.



Does anyone have an idea?



Regards

Stephan


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>
  • [FW-1] disabling a security policy in cli mode, Steiner, Stephan <=