Re: [FW-1] CVP problem NG & Viruswall

[Don <don@FW1-NOSPAMBLACKSUN.ORG>]

Can someone please explain to me the virtues of CVP?

Instead of just setting up a web proxy with Anti-virus capabilities, or an
email relay with anti-virus capabilities, why do so many people choose to
fight with CheckPoint to get CVP working?

If you simply restrict outbound HTTP access to a web proxy, the users will
be forced to use that proxy for web access and you will not have to fight
with CVP. The same is true for SMTP.

All CVP does is add load and complexity to a firewall, which is one device
on your network on which you want to avoid both load and complexity.

Am I missing something here? Do I just not understand what CVP is for?

I agree that CVP is a neat "trick." A cute feature that management can
brag about, but I just do not see a practical application. CVP does not
scale as well as multiple proxies or mail relays do. It adds another layer
which an admin has to troubleshoot when there is a problem.

-Don

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================