[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW-1] NGAI dce-rpc issue resolution
Just thought I'd pass this info along to the group. After all the Windows DCE-RPC attacks in the past weeks, our windows admins patched our exchange server. 2 days after doing so, we noticed the Exchange service not working through any VPN (site to site / SR/SC) after about an hour after policy install. Communication to the Exchange server through the VPN was possible with other services, just not the Exchange service. Checkpoint instructed us to download a new dcerpc.def and update table.deb with dcerp_binds = dynamic sync refresh expires 40; I cant say that the patches to the exchange server were the culprit, but it was working no problem with NGAI for about a month. Only after the patch was installed did this start happening. Not wanting to test the patch by removing it, we implemented this timeout and surprisingly it worked. CPAI-2003-11 is the ID of the fix. -Rob
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|