Hi,
If that's the only option than I guess that's how we will do it.
But it's a tedious job and error prone, so I'd like sth. easier (if
possible).
Tom.
---------------------------------------------------------------------------
Tom Van Overbeke - ABSI Service Delivery Coordinator
email: tomvo AT absi DOT be
Tel: +32 2 333 40 00 - Fax: +32 2 332 34 69
website: http://www.absi.be
---------------------------------------------------------------------------
Edward Luck <ed.luck AT GMAIL DOT COM>
Sent by: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
31/01/2006 11:41
Please respond to Mailing list for discussion of Firewall-1
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
cc:
Subject: Re: [FW-1] smartdefense on NGX R60
Why don't you put it into "Monitor Only" mode? That way it won't stop
the traffic, just let you know that it would have stopped it. You can
then selectively activate features into normal mode as required.
On 1/31/06, Tom Van Overbeke <tomvo AT absi DOT be> wrote:
> Hi,
>
>
> I would like to know if there is an easy way to disable/enable
> smartdefense without losing all the customizations.
>
> Background:
>
> We are implementing smartdefense on a firewall of our customer, checking
> each available option and then decide whether to enable/disable it, and
> possible customize some parameters.
>
> Now, we regularly do nessus scans on our network, and my impression is
> that these are less accurate since smartdefense kicks in from time to
time
> to stop some of the checks (which is actually quite normal, that's wat
> smartdefense does).
>
> I would like to be able to disable smartdefense completely without
losing
> its configuration, run the scans, and afterwards re-enable it with the
> previous configuration.
>
> My impression is that smartdefense doesn't keep its configuration in the
> firewall policy, is this correct ? and is there a way to turn
smartdefense
> globally off while retaining all the customizations we made ?
>
>
> thanks,
>
> Tom.
>
>
>
---------------------------------------------------------------------------
> Tom Van Overbeke - ABSI Service Delivery Coordinator
> email: tomvo AT absi DOT be
> Tel: +32 2 333 40 00 - Fax: +32 2 332 34 69
> website: http://www.absi.be
>
---------------------------------------------------------------------------
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
--
Keep flying, and stay shiny.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
