If you end goal is the have traffic from only max a.b.c.d.e.f to have
access to the internet then you use Checkpoint as part of a complete
security solution. You tie mac a.b.c.d.e.f to ip address x.x.x.x and
then create an appropriate security policy to allow that address out to
the internet. The error here is in trying to design Checkpoint as the
only component in the security solution.
Juan
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of sin
Sent: Friday, May 26, 2006 12:51 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] mac address
Ramki Security wrote:
> Checkpoint being an IP firewall, doesn't work on MAC address. Hence I
> don't think there is a way to do this. By the way, why you want to do
> this?
one reason would be to want to filter traffic based on mac address
(let's say: I want only traffic from a.b.c.d.e.f mac to have access to
the internet).
as a side note, it's a pitty that no one at CKP implemented this in
their products.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
