You only need an agent host for the enforcement module. No one will
authenticate through the management system. For a Linux based enforcement
module, put the sdconf file in /var/ace.
The RSA server can be pretty picky about communication so I would suggest
creating an agent host for each individual object in your cluster, as well
as one for the cluster object itself.
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Steven
Leow
Sent: Tuesday, July 26, 2005 8:42 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] SecurID Authentication
Hi,
I have a windows management server and linux-based enforcement module with
clustering. I'm trying to setup the RSA authentication. On the RSA server,
should i add the agent host for management server or the enforcement module?
And the sdconf.rec file, i should copy where?
Thanks!
Leow
Send instant messages to your online friends http://asia.messenger.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
