Re: [FW1] Does FireWall-1 Pass SNA Traffic ?

[Alexander Hoogerhuis <alexh@FW1-NOSPAMihatent.com>]

One of out customers uses bridging of SNA. It comes through as UDP on
port 1800-or-thereabouts.

cheers,
Alexander

Daniel Hitchcock <DHitchcock@breakwatersecurity.com> writes:

> Clarification:
> 
> Checkpoint doesn't care at all about SNA (or any other non-IP) traffic.  For
> example, a Checkpoint firewall will happily route IPX traffic as long as
> your OS is configured to do so.  Since SNA is non-routable, your firewall
> will only pass it if you can get your OS to bridge SNA.  So, Elliot's
> suggestion about encapsulating SNA is excellent (as long as you can get
> someone on both ends to configure the routers correctly).
> 
> $0.01 :)
> 
> Dan Hitchcock
> CCNA, CCSE, MCSE
> Security Analyst
> Breakwater Security Associates
>> dhitchcock (at) breakwatersecurity (dot) com
> http://www.breakwatersecurity.com
> 
> 
> 
> 
> -----Original Message-----
> From: Elliot Spiegel/Markham/IBM [mailto:sysfrog@ca.ibm.com]
> Sent: Monday, May 07, 2001 1:25 PM
> To: Lior Arbel/Israel/IBM
> Cc: fw-1-mailinglist@beethoven.us.checkpoint.com
> Subject: Re: [FW1] Does FireWall-1 Pass SNA Traffic ?
> 
> 
> 
> Lior...Checkpoint can only pass IP traffic.  If you want to get SNA to flow
> through the firewall, you will have to encapsulate the SNA traffic within
> IP.
> 
> One of the ways you can do this is to use DLSW on a router.  SNA traffic
> hits the router and is encapsulated within IP, flows through the firewall
> to another router that will de-encapsulate the traffic.
> 
> Regards.............Elliot
> 
> Lior Arbel <l_arbel@yahoo.com>@lists.us.checkpoint.com on 05/05/2001
> 09:36:37 AM
> 
> Please respond to Lior Arbel/Israel/IBM@IBMIL
> 
> Sent by:  owner-fw-1-mailinglist@lists.us.checkpoint.com
> 
> 
> To:   fw-1-mailinglist@beethoven.us.checkpoint.com
> cc:
> Subject:  [FW1] Does FireWall-1 Pass SNA Traffic ?
> 
> 
> 
> 
> Sorry for the last massage - was sent by mistake
> 
> I need help - checkpoint claims that fw-1 pass sna
> traffic but i didnt found any document about it
> 
> does anyone tried it before??
> 
> 
> Lior Arbel
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Auctions - buy the things you want at great prices
> http://auctions.yahoo.com/
> 
> 
> ============================================================================
> ====
> 
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ============================================================================
> ====
> 
> 
> 
> 
> 
> 
> ============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ============================================================================
> ====

-- 
Alexander Hoogerhuis
FYI: perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);'


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================