[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Secure Client and NAT
No there is not.
How does this undermine the use of a stealth rule? Disable the
"Respond to Unauthenticated Topology Requests" option in Policy->Properties
in order to enable SSL authenticated topology downloads to prevent just "anyone"
from getting your userc.C file.
Also, when constructing your Client Encrypt rule, make sure to put the
firewall object(s) in the destination field and negate them so that even VPN
users can't make a direct connection to the firewall through a SecuRemote
session.
-Jeff Hochberg
|