RE: [FW1] Install on ..

[Dan Hitchcock <DHitchcock@FW1-NOSPAMbreakwatersecurity.com>]

Title: RE: [FW1] Install on ..

A further clarification:

You specify how FW1 inspects the packets by modifying the "Apply Gateway rules to interface direction" setting in Policy -> Properties.  The article mentioned below, however, does cite a usage of the SRC/DST "install on" options, relating specifically to packets originating from the gateway.  Have a look in the Help section of the GUI - search for "rule base install on".  Another way of looking at it is that you can use "SRC" and "DST" to override the settings specified in Policy->Properties.  As noted on Phoneboy, Inbound should be fine in practically all cases, using "gateways" or the specific firewall object in the "install on" field.

HTH

Dan

-----Original Message-----
From: Brockhoven, Werner [mailto:Werner.Brockhoven@Compaq.com]
Sent: Tuesday, September 25, 2001 11:22 PM
To: 'Mohamed Maraikayar'; fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: RE: [FW1] Install on ..

Hello,

The difference is with the way FW-1 will check the packets as they enter or
leave the gateway.

Check http://www.phoneboy.com/faq/0102.html for the awnser.

Regards,

Werner

-----Original Message-----
From: Mohamed Maraikayar [mailto:nmod@rediffmail.com]
Sent: Tuesday, September 25, 2001 3:05 PM
To: fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: [FW1] Install on ..

this may be an elementary question,but i am helpless now.In checkpoint rule
base,What is the difference between Install on source,destination or routers
or gateways? i read the secadmin pdf of checkpoint, but coudlnt understand
the differnce.i have ,by default choose install on gateways.but if we give
install on source,all outbound connections from that source is checked.the
prime objective is also achieved when we give install on gateways.could
anyone clear me with simple words ?
thanks
mohamed.

============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====

================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================