Firewall-1

Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RP

Subject: Re: [FW-1] Urgent help needed. NGx R61 with HFA_01 and Microsoft DCE-RPC
From: Hugo van der Kooij <hvdkooij AT VANDERKOOIJ DOT ORG>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 30 Oct 2006 07:21:49 +0100
On Sun, 29 Oct 2006, cisco4ng wrote:

> Attack Name:           DCE-RPC Enforcement Violation
> Information:             DCE-RPC Interface UID: 
> e3514235-4b06-11d1-ab04-00c04fc2dcd2
> Attack Information:  UUID is not allowed through the Rule Base

Since you have the UID you can add your own definition for it and make 
your own protocol definition.

I know we had to do so for a NGX R61 firewall with HFA-01 as well. And 
Check Point will always lag behind anything microsoft will come up with 
new definitions without announcement.

Hugo.

-- 
        hvdkooij AT vanderkooij DOT org http://hvdkooij.xs4all.nl/
            This message is using 100% recycled electrons.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>