[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Does FireWall-1 Pass SNA Traffic ?
Title: RE: [FW1] Does FireWall-1 Pass SNA Traffic ? Fine.
I guess I'm being frivolous in calling SRB "routing", since it's
technically bridging, and I will not argue over it.
Although we could go into a lengthy conceptual
discussion off-line. On the other hand, there is nothing that prohibits
upper
layer protocols from one stack e.g., SNA to be transported using protocols from
another stack e.g.. TCP/IP, hence IP
encapsulation (which is a misnomer since IP
encapsulates anyway).
As far
as IPX is concerned, CheckPoint does not support it and if you think it does, I
would be interested to know
how
you define an IPX network and how you would filter, let's say, SAP
advertisements in the CheckPoint rulebase...
On the
other hand, if you suggest that you can have IPX driver installed
on it and route despite Checkpoint then... sure,
Checkpoint couldn't care less about it. And
if that's really what you meant then I need to start reading more carefully.
:-)
George
I'd
be interested in the technical details of how you've implemented SNA routing
(IP encapsulation obviously doesn't count, as that's IP routing, not SNA
routing), and the environment in which IPX would not route on a device running
Checkpoint Firewall and an IPX stack. Please reply directly if you
prefer...
Thanks!
Dan Hitchcock
_____________________________________________________________________ IMPORTANT NOTICES: This message is intended only for the addressee. Please notify the sender by e-mail if you are not the intended recipient. If you are not the intended recipient, you may not copy, disclose, or distribute this message or its contents to any other person and any such actions may be unlawful. Banc of America Securities LLC("BAS") does not accept time sensitive, action-oriented messages or transaction orders, including orders to purchase or sell securities, via e-mail. BAS reserves the right to monitor and review the content of all messages sent to or from this e-mail address. Messages sent to or from this e-mail address may be stored on the BAS e-mail system.
|