Re: [FW-1] Problem SecureClient access to SDS Server

[Ray [Permanent Link]]

Hi Fabrice,

The solution is to forget about SDS. It's no longer a part of the system 
starting with NGX, probably because Check Point now supplies .MSI files. 
You're trying to make something work that you cannot use in the future.
Ray

> From: Fabrice BARUTEL <fabrice.barutel AT STERIA DOT COM>
> Reply-To: Mailing list for discussion of Firewall-1              
> <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
> To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> Subject: [FW-1] Problem SecureClient access to SDS Server
> Date: Fri, 17 Feb 2006 10:27:42 +0100
>
> Hi everyone,
>
> I'm currently testing SecureClient with a Policy Server and Software
> Distribution Server (SDS) on the same FW1.
> I'm using SecureClient in Office Mode with a IP Pool.
> SecureClient have problems to access to SDS Server while it is 
> disconnected.
> I see log into SecureClient Diagnostics showing that SecureClient doesn't
> send packet to SDS Server (port TCP 65524) because SDS Server is
> automatically inside the encryption domain, and want to be connected to
> access to SDS Server on TCP 65524. One it is connected, and with 
> appropriate
> rules inside FW1 and Desktop Policy, SecureClient have access to TCP 65524
> and can download new packages (I see packets are encrypted).
>
> Has anyone has a solution or a common one solution for my SecureClients to
> have access to SDS Server while disconnected ?
>
>
> Thanks any advance for your help, clues, or anything.
> --
> Fabrice BARUTEL
> fabrice.barutel AT steria DOT com
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================