Firewall-1

[FW-1] Does a stealth rule disable Client Authentication?

Subject: [FW-1] Does a stealth rule disable Client Authentication?
From: Sascha Picchiantano <s.pic AT ESPIQUE DOT DE>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 18 Apr 2005 13:58:33 +0200
Hi,

we are running NG and use SecurID to authenticate users. This works
good. However, I implemented a stealth rule (deny traffic to firewall)
and since then Users can't authenticate anymore. I was under the
impression that authentication stuff is handled by implied rules but it
looks as if not. Any idea? What do I have to open up so users can
authenticate?

Oh btw: When users access the Internet with a browser their browser
title bar shows
[ip_address_of_firewall]\fwauthredirect_[long_number_probably_cookie]
and hangs there. This might be related...?

Any suggestions please? :)

Cheers
Sascha

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>