Firewall-1

[FW-1] Does NGX support selective SmartDefense?

Subject: [FW-1] Does NGX support selective SmartDefense?
From: Sascha Picchiantano <s.pic AT ESPIQUE DOT DE>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 26 Oct 2005 15:46:47 +0200
Hi,

I think a big drawback of SmartDefense in NG is that you can not disable
it for certain destinations or sources. Say you have enabled to block
non-ascii characters in HTTP then this is on for all HTTP
communications, no matter what. Now say you know of a website that's
basically secure and you need to have access to it, but it is being
blocked by SmartDefense because it sends out non-asciii characters in
HTTP headers. Now what do you do: Don't access the site or disable the
character checking?

Now... maybe there is an answer for this in NGX? 

Thanks
Sascha

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>