[FW-1] opening a remote gui

[Idan Dolev <IDolev@FW1-NOSPAMINTERWISE.COM>]

Hi,

We have few remote offices connected to us throw vpn in a distributed
environment. I want to allow one of the users to be able to open a gui to
our firewall.
If I leave the vpn rules which are trivial ( enc_domain enc_domain any
encrypt ) as is, when the user tries to communicated with the firewall than
rule 0 implies and I see in the log viewer that it passes the packet as is
and not throw the vpn. If I disabled accept firewall-1 connection first,
which solves this problem, I have to go and search for all of the FW
explicit rule which I use and enable them. I can solve this by  giving him a
static IP and by that "getting him out" of the vpn.
Are there any other solutions ?

Best regards,

Idan Dolev

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================