Re: [FW-1] Strange problem with Web access to an Access Point defined in a DMZ lan

[Xena Warrior <xenawebwarrior@FW1-NOSPAMYAHOO.COM>]

Is the rule allowing access to the APs also
authenticating?

--- admin@IAA.GOV.IL wrote:
> Thanks.
>
> I'll look into that today, and possibly move the
> rule in question above the other one and check.
>
> From a quick scan, neither the AP's or the WS
> onjects which have access to the AP's are in the
> HTTP with resource rules, but I will check more in
> depth a bit later.
>
> Thanks for the idea,
>
> Mike
>
> > -----Original Message-----
> > From: David Knoll [SMTP:david@UPBIT.CO.IL]
> > Sent: à ôáøåàø 24 2002 9:32
> > To:   FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> > Subject:           Re: [FW-1] Strange problem with
> Web access to an Access Point             defined in
>             a DMZ lan
> >
> > Well if it comes before the rule you are talking
> about and it looks like this:
> > WS-Objects (or any other group that includes
> WS-Objects)    Any (or any other group that includes
> Access Point Group) Http with resource
> >
> > Then traffic passes through the security server.
> > Try the PTR records see if it solves your problem.
>
> >
> >
> >
> > David Knoll
> > UpBIT Solutions Ltd
> >
> >
> > Tel:+ 972-3-6476387
> >
> > Fax:+ 972-3-6476396
> >
> > Cellular:+ 972-54-496357
> >
> >
> >
> > E-mail: david@upbit.co.il
> >
> >
> >
> > Upbit Solutions Ltd
> >
> > 9 Nissan Street
> >
> > Tel-Aviv 69715, Israel
> >
> > --------------------------------------------
> > This message may contain confidential and/or
> proprietary information, and is intended only for
> the person / entity to whom it was originally
> addressed. The content of this message may contain
> private views and opinions which do not constitute a
> formal disclosure or commitment unless specifically
> stated.
> >
> >
> >
> >
> >
> >
> >
> >
> >       -----Original Message-----
> >       From: Mailing list for discussion of
> Firewall-1
>
[mailto:FW-1-MAILINGLIST@beethoven.us.checkpoint.com]
> On Behalf Of admin@IAA.GOV.IL
> >       Sent: Sunday, February 24, 2002 8:37 AM
> >       To:
> FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> >       Subject: Re: [FW-1] Strange problem with Web
> access to an Access Point defined in a DMZ lan
> >
> >
> >
> >       Dave,
> >
> >       Yes I do, but not in this specific rule, so
> as far as I know it should not catch this HTTP.
> >
> >       Mike
> >
> >       -----Original Message-----
> >
> >       From:   David Knoll [SMTP:david@UPBIT.CO.IL]
> >
> >       Sent:   ä ôáøåàø 21 2002 0:23
> >
> >       To:
> FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> >
> >       Subject:             Re: [FW-1] Strange
> problem with Web access to an Access Point
>   defined in             a DMZ lan
> >
> >       Do you use a security sever (add with
> resource) for HTTP?
> >
> >
> >
> >       David Knoll
> >       UpBIT Solutions Ltd
> >
> >
> >       Tel:+ 972-3-6476387
> >
> >       Fax:+ 972-3-6476396
> >
> >       Cellular:+ 972-54-496357
> >
> >
> >
> >       E-mail: david@upbit.co.il
> >
> >
> >
> >       Upbit Solutions Ltd
> >
> >       9 Nissan Street
> >
> >       Tel-Aviv 69715, Israel
> >
> >       --------------------------------------------
> >       This message may contain confidential and/or
> proprietary information, and is intended only for
> the person / entity to whom it was originally
> addressed. The content of this message may contain
> private views and opinions which do not constitute a
> formal disclosure or commitment unless specifically
> stated.
> >
> >
> >
> >
> >
> >
> >
> >
> >       -----Original Message-----
> >       From: Mailing list for discussion of
> Firewall-1
>
[<mailto:FW-1-MAILINGLIST@beethoven.us.checkpoint.com>]
> On Behalf Of admin@IAA.GOV.IL
> >       Sent: Wednesday, February 20, 2002 4:26 PM
> >       To:
> FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> >       Subject: [FW-1] Strange problem with Web
> access to an Access Point defined in a DMZ lan
> >
> >
> >
> >       Afternoon all,
> >
> >       I have a very odd situation here that I am
> unable to work out.
> >
> >       I have a setup as follows :
> >
> >       Internal Network
> >
> >       |
> >
> >       |
> >
> >       FW ---- Secured VLAN
> >
> >       |
> >
> >       |
> >
> >       Internet
> >
> >       On the secured VLAN I have a Lan dedicated
> only to Access Points.
> >
> >       I have a rule allowing specific users to
> access the AP's from the Internal Network using HTTP
> and Telnet.
> >
> >       The users can Telnet to the AP's fine.
> >
> >       The users attempt to access the AP's via
> HTTP. I see the sessions established in the log' and
> in the browser I get :>
> >
> >       "FW-1 at fw: Failed to connect to the WWW
> server".
> >
> >       This again, despite the fact that I see the
> session established in the logs, and Telnet
> (standard) works fine.
>
=== message truncated ===


__________________________________________________
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================