[FW-1] Port Scan

["Roan, Wayne" <wroan@FW1-NOSPAMCBC-RALEIGH.COM>]

I have two Checkpoint Firewalls 4.1 setup, I only allow certain protocols
through (ftp, http) for static NATs.  But when I port scan those NATs from
the outside world, you can see all available ports but can only connect to
them with the specified protocols.  I allow ICMP traffic, is port scan a
result of allowing ICMP traffic or am I missing something?

Thanks,

Wayne Roan
Information Technology

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================