RE: [FW1] Websense and FW-1 Nokia

["Hubbard, Dan" <dhubbard@FW1-NOSPAMwebsense.com>]

Title: RE: [FW1] Websense and FW-1 Nokia

Paul;

Sorry for the delay. This is a known bug with the UFP. Unfortunately the actual TCP connection between the UFP server and Firewall is all handled by Checkpoint.

I have seen this in our lab, particluarily if the Firewall is under load or had open connections the Firewall will not re-establish the TCP connection with the UFP server. To date the only fix is what you are doing (ie: fwstop / fwstart).

If possible it would be much appreciated if you also open a trouble ticket with Checkpoint regarding this (or get your reseller to) and let me know the progress.

Thanks

It works, but there seems to be a glitch with the interaction between FW-1 and Websense.

I have IP440s, IPSO 3.3E, FW-1 4.1SP3.  If the Websense (NT) box is rebooted, the firewalls never reestablish the connection to Websense, even after the Websense service is started.  I get "Error communicating with the UFP server".

This is resolved by stopping and starting the firewall processes.

Any comment Dan?

Paul Murphy.

>>> "Hubbard, Dan" <dhubbard@websense.com> 5/29/2001 03:27:37 pm >>>
Yes it does work, but not running on the actual Nokia appliance. You have to
install it on a seperate box. We also recommend 4.1 SP3 on the Firewall.

Please send more details as to what your problem is exactly.

-----Original Message-----
From: takashi kouda [mailto:kouda@lac.co.jp]
Sent: Sunday, May 27, 2001 9:17 PM
To: FW1-MailingList (E-mail)
Subject: Re: [FW1] Websense and FW-1 Nokia

Hi everyone

> Can anyone confirm websense works with FW-1 on Nokia?
> Any consideration on this configuration?

I do by manual.
My configuration is below.
--------------------------
 External Segment
    |
 FireWall-1
    |
 Websense
  | | |
 Clients
--------------------------
# On FireWall-1 I make ServerObjects.

------------------------------
Takashi Kouda kouda@lac.co.jp
LAC Co., Ltd. 03-5531-0332
2-45 Time24 3F Aomi Kouto-ku Tokyo
------------------------------

============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====

---------------------------------------------------------------------------------------------------------------------------

CRESTCo Ltd.             The views expressed above are not necessarily those
33 Cannon Street.        held by CRESTCo Limited.
London  EC4M 5SB (UK)     
+44 (020) 7849 0000     http://www.crestco.co.uk
---------------------------------------------------------------------------------------------------------------------------