[FW1] SecuRemote Issues

["Edward Kuhner" <ekuhner-list@FW1-NOSPAMpowerit-up.com>]

Hello All,

I am having a strange problem with SecuRemote.

I have the following rule setup:

1 - UserGroup@Any - 10.5.6.x network - Any - ClientEncrypt

I have a single user setup in this usergroup.

The user can authenticate and successfully access resources in the 10.5.6.x
network.

Here are the problems:

The resources in the 10.5.6.x network should not be fully accessible.  Does
the secure remote then follow the remaining rules in the rulebase??  Or do I
need to add user access to the other existing rules in the rulebase?

The rulebase has some rules that restrict access to these 10.5.6.x
resources, but the rule looks something like this:

5 - 10.5.7.x network - 10.5.6.x network - small service list - Accept

Should I add user access to this rule to restrict access???

Also, when I connect with securemote, I am able to PING other 10.x resources
that are NOT in the 10.5.6.x network.  These are other resources on the
network that I do not want to have access to.  I cannot do anything EXCEPT
for PING, and I wanted to find out where the Firewall allows this PING to
come through.

Thanks in advance!!!

Edward Kuhner
PowerIT-Upfxekuhner@powerit-up.com
www.powerit-up.com



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================