NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Non-SYN problems with NG FP2 / Will CP support for Non-SYN in the future?



> Does anyone else agree that Check Point should allow non-SYN packets by
> default? What about including a simple check box in global properties
> instead of objects_5_0.c? This is a big deal for a number of potential
> customers deciding between Check Point and PIX. Since Cisco PIX is not
> affected by this issue, PIX has the advantage.
No we do not agree. You can enable CP to pass non-SYN packets so there is
no loss of functionality here.

This use to be the default behavior for CheckPoint but it lead to serious
DoS problems. A firewall should not pass traffic that has not been
explicitly allowed.

> Please advise.
Perhaps you should clean up your routing so that it isn't asymetric?

-Don

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.