NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] SecureClient and IP Forwarding.



Did the person turn on "Internet Connection Sharing"? SecureClient treats
home networks using ICS as IP forwarding, which means that all those users
that are sharing their cable/DSL modems with their family members can no
longer do so.

This is one of the quirks that really bugged me about SecureClient. In a
perfect security hack-proof world, which we'll call "Fantasy Land", it makes
sense to have it off, however many people live in the "Real World" in which
people use such features as ICS and absolutely will not give it up. I often
wondered why they didn't design the product like other VPN solutions that
allow your home networks when your not using the VPN, and disable it when
you are connected, but they wanted an 'always-on' solution, which means the
computer needs to always be in a secure state even when the user doesn't
plan on using the VPN.

CheckPoint really needs to change this because "yes", they are losing some
sales to other VPN vendors solely because of the way that SecureClient seems
to interfere with the normal operation of users computers. Many corporations
want to roll out a solution that does not interfere with the normal
operation of a users computer, however when they are using the VPN the
computer is protected, when they are off it goes back to normal (other
vendors provide this interactive 'on-demand' protection). For those out
there that havn't tried SecureClient on a multiple-network PC with routing
or ICS on, you may not have run across these issues yet. SecureClient works
nice on stand-alone PC's with one network connection, beyond that it's an
annoying product. If they fixed this in the past few months then let me know
and I'll give it another try, it's been about 3 or 4 months since I tried it
last.

Ron


-----Original Message-----
From: Tim Jones [mailto:[email protected]]
Sent: Monday, January 28, 2002 1:16 PM
To: [email protected]
Subject: [FW-1] SecureClient and IP Forwarding.


Hello.

One of our SecureClient users is currently haven't a
problem that has me baffled.  All of a sudden,
SecureClient complains that "The IP Forwarding option
of the TCP/IP protocol is set! Desktop security
features will not be active until IP Forwarding is
disabled."

I don't know what suddenly caused this, nor how to fix
it.  The registry key in Win2k that enables IP routing
is 0, so I'm at a loss.  The only thing that's been
done to the machine lately is that Earthlink was
installed.  But I've installed it on several other
SecureClient machine without issue.

Anyone know what the problem could be here?

__________________________________________________
Do You Yahoo!?
Great stuff seeking new owners in Yahoo! Auctions!
http://auctions.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.