-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM]On Behalf Of Jim
Grant
Sent: Thursday, September 30, 2004 4:32 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] JPEG/GDI+ DLL Exploit and Two Firewalls
We have two CP FW-1 firewalls managed by the same console/log server. One
firewall (Nokia 380) is connected to the public Internet and the other
firewall (nokia 330) is connected to a 3rd party value added network. We
applied the SmartDefense upgrade version 541040926 and applied the
malformed JPEG rule to the (Nokia 380/Public Internet) and it
automatically applied the same rule to the Nokia 330/3rd party VAN.
1) Why did this occur?
2) How can we apply the rule to ONLY the Nokia 380/Public Internet
Firewall?
Do we need to have two console/log servers? one for each firewall?
Thanks
Jim Grant
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|