The is a implementation guide from RSA. The address is
http://rsasecurity.agora.com/rsasecured
I recommend to look fot the checkpoint implementation with secure ID. I got
it from there, it's very helpful.
Best Regards,
Lino E. Avila
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Alan
Baker
Sent: Tuesday, July 26, 2005 9:58 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] SecurID Authentication
Do you know what the location for the sdconf file is under Solaris install
of Checkpoint?
The manual just states var/ace. Is it just implying creating an ace
directory under /var?
Many thanks
Alan
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Mike
> Feetham
> Sent: 26 July 2005 14:09
> To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> Subject: Re: [FW-1] SecurID Authentication
>
> You only need an agent host for the enforcement module. No one will
> authenticate through the management system. For a Linux based
> enforcement module, put the sdconf file in /var/ace.
>
> The RSA server can be pretty picky about communication so I would
> suggest creating an agent host for each individual object in your
> cluster, as well as one for the cluster object itself.
>
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of
> Steven Leow
> Sent: Tuesday, July 26, 2005 8:42 AM
> To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> Subject: [FW-1] SecurID Authentication
>
> Hi,
>
> I have a windows management server and linux-based enforcement module
> with clustering. I'm trying to setup the RSA authentication. On the
> RSA server, should i add the agent host for management server or the
> enforcement module?
> And the sdconf.rec file, i should copy where?
>
> Thanks!
> Leow
>
_______________________________________________________________________
The information in this email is confidential. It is intended solely for
the addressee. Access to this email by anyone else is unauthorised. If you
are not the intended recipient, any disclosure, copying, or distribution is
prohibited and may be unlawful. If you have received this email in error
please delete it immediately and contact commercial AT sepura DOT com.
_________________________________________________________________
This e-mail has been scanned for all viruses by Star Internet.
The service is powered by MessageLabs.
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
