Re: [FW-1] NTP

[Skar <goblinkest@FW1-NOSPAMYAHOO.COM>]

Hi,

Did you get response?

Has anyone integrated the FW-1, IDS and related
security devices with external time Sync. devices like
Truetime or Datum. What's the most secure integration,
from RS-232 or from Lan? Do SO or Nokia support sync
via RS232?

Has anybody implemented the PKI functionality(?) for
Ntp V.4? At this time, do checkpoint NG certificates
can be used for this sync. process, or we need other
PKI infrastructure, which do you prefer?

What do you prefer for remote FW modules, Sync from
the Internet or your trusted source (So you set up a
time server open to Internet or another device)

Thanks.

--- Newsgroups <FW1@NL.FORTIS.COM> wrote:
> Hi listers,
>
> Do any of you know of any security issues with the
> NTP protocol (port 123)?
> We would like to set up one internal server to serve
> as internal time server
> (synced with the Internet), where all other servers
> will point to. The
> reason for doing this as we have some time oriented
> rules on the FW's which
> have to work together.
>
> Also tips and trics for the best way (tools?) for
> setting up an NTP server
> are welcome.
>
> With kind regards,
>
> Marco Schelling
>
>
>
***************************DISCLAIMER***********************************
> Deze e-mail is uitsluitend bestemd voor de
> geadresseerde(n).
> Verstrekking aan en gebruik door anderen is niet
> toegestaan.
> Fortis sluit iedere aansprakelijkheid uit die
> voortvloeit uit
> electronische verzending.
>
> This e-mail is intended exclusively for the
> addressee(s), and may
> not be passed on to, or made available for use by
> any person
> other than the addressee(s).
> Fortis rules out any and every liability resulting
> from any
> electronic transmission.
>
****04******************************************************************
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================


=====
------------
Sick Boy

__________________________________________________
Do You Yahoo!?
Great stuff seeking new owners in Yahoo! Auctions!
http://auctions.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================