RE: [FW1]

["David E. Hoobler Jr." <DEH@FW1-NOSPAMtopsoe.com>]

I am doing this, but using SecurID for authentication.  If you have users
who periodically connect to the internal network, but also connected
remotely, I recommend that you use the offline store for those employees who
are in and out of the office.  When they are in the office, they should
connect with the network.  When they are out of the office, they should work
offline and synchronize their offline store.  They should get in the habit
of synchronizing their offline store while they are connected to the local
network just prior to leaving the office.  This will reduce the time
required to synchronize remotely.

When setting up SecuRemote, I suggest you use firewall password for testing
purposes.  Once you have the VPN established, implement a stronger
authentication scheme.  The integration between FW1 and Ace Server (SecurID)
is somewhat tedious.  Never having used IKey, I can not comment on it.  

You should be aware that SecuRemote offers no protection for the client.  I
actually use SecureClient rather than SecuRemote.  SecureClient is not free.

Good luck,
David Hoobler

-----Original Message-----
From: Arie Gilboa [mailto:arie.gilboa@telrad.co.il]
Sent: Tuesday, May 15, 2001 6:28 AM
To: 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: [FW1] 
Importance: High



Hello all!,

We have very serious problems with accessing ExChange services: Mail and
Calendar,
with outlook ,via CheckPoint VPN with USB tokens. There are so many issues
in this process,
and I need your help to make the best configuration in each of them.
Currently there are about 50 users which should use this VPN/Mail access.

We usually use this following platforms: PC  Windows98, Outlook97/2000,
SecuRemote, IKey,
ExChange 5.5 server on NT4, Checkpoint VPN1 4.1 sp3 on Ultra60-Solaris 2.6,
2M (E1) Internet line and Netscape LDAP server on Ultra60-Solaris 2.6.

Do you have any recommendation about best configuration in the above
systems, such as:
PC Hardware requirements, Windows configuration, Outlook-Exchange
configuration (synchronization, offline, personal folder, mail size, server
policies..), VPN server configuration,
LDAP configuration, properties, rules, parameters). 
About internet line, we would like to install Bandwidth manager in order to
set priority to VPN. 

Any help  will be welcome.

Thanks, 
Arie Gilboa.


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================