NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Non-transparent mode and https




Let's begin at the beginning...

-did you do an fwstop/fwstart after making the changes to the
/$FWDIR/conf/fwauthd.conf
-did you install the new policy...


-----Original Message-----
From: [email protected] [mailto:[email protected]]
Sent: Tuesday, January 02, 2001 6:44 PM
To: [email protected]
Subject: [FW1] Non-transparent mode and https



I am trying to set up non-transparent mode and https as described in chapter
1 of the CP FW-1 Architecture & Administration.  My intent is to be able to
https to the firewall from the internet such that I can get to an internal
web server.  When I test,

I never get an authentication window.

The only thing in the log for the source address is some rejected
netbios-ns.  The browser (which is external) never times out.

Does anyone have any ideas why I don't get an authentication window?
Any common reasons why this would happen?

The rule is:

httpsUsers@Any Firewall https userauth

If I disable the rule, I get a drop with the cleanup rule in the log.

I've added "443 bin/in.ahttpd  wait 0 ec" to /$FWDIR/conf/fwauthd.conf

I appreciate your response.


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.