Firewall-1

Re: [FW-1] Proxying SSH

Subject: Re: [FW-1] Proxying SSH
From: Crist Clark <crist.clark AT GLOBALSTAR DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 18 Apr 2005 13:02:29 -0700
Tom Stala wrote:

I have been asked if there is a way to proxy SSH with CheckPoint Nokia.

Uhh... One of the essential features of SSH is end-to-end authentication.
Proxying amounts to a man-in-the-middle attack. You cannot proxy SSH
without breaking the end-to-end security.
--
Crist J. Clark                               crist.clark AT globalstar DOT com
Globalstar Communications                                (408) 933-4387

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>