NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Service "Any" in NG FP3



Trung Nguyen wrote:
>
> Dear CheckPoint gurus,
>
> In our FW policy we have 1 rule saying:
>
> Source IP  Destination IP   Service   Action
>
> x.x.x.x     y.y.y.y         any        Accept
>
> However when we tried to connect from x.x.x.x to
> y.y.y.y using X11 tcp protocol it failed. I checked
> the log file and it stated that X11 is not allowed
> through service "* any". It also recommended to create
> earlier rule that explicitly allows X11.
>
> I just wonder which services are NOT allow through
> service "*. any" and the reason why please drop me a
> line
>
 I stumbled on this one too, when starting to use FP3.
 The why is probably related to sec. reasons,though I find
 it confusing initially

 I don't know however whethe there are other services
 excluded besides X11 now from the 'Any' concept
 in Smart Dashboard.

 M.

> Thanks.
>
> Regards,
>
> Trung Nguyen
>
> Email:   [email protected]
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Shopping - Send Flowers for Valentine's Day
> http://shopping.yahoo.com
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================

--

 'Time is a consequence of Matter thus
 General Relativity is a direct consequence of QM
 (M.E. Mar 2002)

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.