[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] AW: [FW1] RE: [FW1] Firewall-1 and SAP
hi mike the prob in sap is that it needs for printer setup a special ip-address or hostname. therefore it is neccassary that the hostname of the client is known by sap. therefore you should enable dns-lookup of the sap-applicationserver. you should register the client to a winsserver. you have to create a dns-server (winnt, to which the sap-application-server looks up) which look up addreses from wins server. with secure domain login it should be possible to add the local printer to sap. regards frank -----Ursprüngliche Nachricht----- Von: Mike Anning [mailto:[email protected]] Gesendet: Montag, 25. September 2000 19:46 An: Joe Voisin Cc: 'Claudio Lupi'; Fw-1-Mailinglist Betreff: Re: [FW1] RE: [FW1] Firewall-1 and SAP We've managed to convince the SAP developers (In the US) to tie it down as much as possible so we only have certain 32xx and 36xx ports open so it may be worth having a word with the developer guys to see what they can do. Cheers Mike Joe Voisin <[email protected]> on 25/09/2000 18:40:33 To: 'Claudio Lupi' <[email protected]>, Fw-1-Mailinglist <[email protected]> cc: (bcc: Mike Anning/WEY/EU/CHEP) Subject: [FW1] RE: [FW1] Firewall-1 and SAP Claudio, REMOTE_NET SAP_SERVERS 3200-3399 TCP (SAP_GW) 3600-3602 TCP (SAP_MS) 3299 (SAP_OSS) --------------------------------------------------------------------- SAP_SERVERS REMOTE_NET 3200-3399 TCP (SAP_GW) 3600-3602 TCP (SAP_MS) --------------------------------------------------------------------- You don't need the SAP_OSS ports unless you are connecting to SAP_OSS. I don't know, your port numbers may not be the same either. I really don't like the number of ports that I have to leave wide open. We have offices in Canada, the States, and in Europe... So I have to leave it open to all of our subnets. (but not the internet) For users connecting via securemote, the same rules apply. I've been using this for about a year now with no problems whatsoever. ====================================================================== Joseph Voisin, Systems Administrator, Engel Canada Inc. www.engelmachinery.com | [email protected] |PGP Fingerprint: A20B 135D 0920 074F C7FE D72D 88A7 2521 5138 DFC2 ====================================================================== > -----Original Message----- > From: Claudio Lupi [mailto:[email protected]] > Sent: Monday, September 25, 2000 1:22 PM > To: Fw-1-Mailinglist > Subject: [FW1] Firewall-1 and SAP > > > > Can anyone help me writing a rule to filter SAP traffic > between a Sap server and a SAP Client + priner > My Chepoint Firewall-1 release is 4.1 on NT 4.0 SP6a. > > Thanks > Claudio > > > > ============================================================== > ================== > To unsubscribe from this mailing list, please see the > instructions at > http://www.checkpoint.com/services/mailing.html > ============================================================== > ================== > ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|