Why don't you put it into "Monitor Only" mode? That way it won't stop
the traffic, just let you know that it would have stopped it. You can
then selectively activate features into normal mode as required.
On 1/31/06, Tom Van Overbeke <tomvo AT absi DOT be> wrote:
> Hi,
>
>
> I would like to know if there is an easy way to disable/enable
> smartdefense without losing all the customizations.
>
> Background:
>
> We are implementing smartdefense on a firewall of our customer, checking
> each available option and then decide whether to enable/disable it, and
> possible customize some parameters.
>
> Now, we regularly do nessus scans on our network, and my impression is
> that these are less accurate since smartdefense kicks in from time to time
> to stop some of the checks (which is actually quite normal, that's wat
> smartdefense does).
>
> I would like to be able to disable smartdefense completely without losing
> its configuration, run the scans, and afterwards re-enable it with the
> previous configuration.
>
> My impression is that smartdefense doesn't keep its configuration in the
> firewall policy, is this correct ? and is there a way to turn smartdefense
> globally off while retaining all the customizations we made ?
>
>
> thanks,
>
> Tom.
>
>
> ---------------------------------------------------------------------------
> Tom Van Overbeke - ABSI Service Delivery Coordinator
> email: tomvo AT absi DOT be
> Tel: +32 2 333 40 00 - Fax: +32 2 332 34 69
> website: http://www.absi.be
> ---------------------------------------------------------------------------
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
--
Keep flying, and stay shiny.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
