[FW1] Solstice Backup and Checkpoint Firewall

[jonny robertson <jonny@FW1-NOSPAMvixen.correspondence.school.nz>]

Hi again....  :))

Has anybody on this list had any experience of trying to use Sun Solstice
Backup (version 6) with Checkpoint Firewall?
I'm trying to backup a machine from one network through the firewall and
onto another.

I'm running CPFW-1 4.1 (SP3) and am having a big problem making it work
properly....

It looks to me like Checkpoint Firewall does not understand how Solstice
intends to communicate with its clients.  When the information that builds
up the bootstrap comes back from the client, it is dropped on rule 0 with
the good old 'unkown established TCP packet'.
It's not a timeout problem as it happens regularly within 10 minutes of
starting the backup, and before the packet is dropped, I can see it open
up a port connection normally (SYN --> SYN-ACK --> ACK).

So am I right in thinking that the (partial!) statefullness of Checkpoint
Firewall is dependent on understanding the specific applications that will
be passing data through it?

any help would be much appreciated,
cheers
-jonny
Wellington,
New Zealand






================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================