[FW-1] Accept Control Connections disabled

[Martin Horsley <mhorsley@FW1-NOSPAMTOTALISE.CO.UK>]

Hello, I have just sat the CCSA NG exam, and failed (63%)!  One of the
questions I had difficulty with was the following.

If you have disabled the 'Accept VPN-1 & Firewall-1 Control Connections' in
the Implied rules section of Global Properties, how can you re-enable
communications between VPN-1/Firewall-1 daemons?

According to the manual/help, if you disble this option, you must explicitly
allow these connections in the rule base.  My understanding of this procedure
is that if you disable Control Connections, and do not explicitly implement
these rules, you will no longer be able to communicate between the Policy
Editor and Management Server. Therefore preventing you from modifying the
security policy and re-enabling the Control Connections.

Is there a command line option, a file that can be edited on the Management
Server, or some other way of resolving this?

Thanks,
Martin.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================