NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Policy editor multiple FW1



> 1- Currently we have to connect to a firewall with the policy editor.  If I
> would like to connect to a another firewall, I have to disconnect and reconnect
> to the other firewall.  In the policy editor there is an option to select where
> the rule is installed.  Would it be possible to have one policy rule that
> installs on all our firewalls instead of reconnecting to each FW and installing
> all rules seperatly?
You do this by having firewall modules connected to an Enterprise
Management Console which you then connect to with your GUI.

Basically:
                                Firewall Module
                               /
GUI --- Management console ---<-Firewall Module
                               \
                                Firewall Module

> 2- If the above is possible does that mean that I have to the firewalls as FW1
> workstations on the main firewall?  How does FW authenticate the user to the
> other firewall?
When using NG, each firewall gets defined as having FW-1 installed and the
MAnagement console gets defined as being a management console.

> 3- Is there a policy editor that runs under Linux?
Nope.

-Don

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.