Re: [FW-1] Anti Virus and URL filtering using the same U RI Resource?

["Mercier, Yannick (CA - Montreal)" <ymercier@FW1-NOSPAMDELOITTE.CA>]

Title: RE: Anti Virus and URL filtering using the same URI Resource?

I just write my CCSE exam so it is fresh in my memory;

The CVP manager is a separate package that you can find on checkpoint's install cd : CPCVPM-41

I dont think it is available for nokia, but I remember its available for solaris and windows

 

If you can find the Checkpoint CCSE Courseware somewhere you can find more info

on it in a section near the end of the book called "CVP Manager"

My collegue here have the book version C1012.4.1 Rev.A, it is at page 376

 

If you need more info, feel free to ask

 

Yannick

-----Original Message-----
From: Spadafora, Robert (CA - Toronto)
Sent: Wednesday, May 29, 2002 10:12 AM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] Anti Virus and URL filtering using the same URI Resource?

I see from replies to my original request below that the CVP Manager may be an answer to my problem.
Does anyone have some detailed information and configuration documents for the CVP Manager?
I searched the Check Point knowledge base and found some hits but, nothing to the detail I'm looking for.

Does the CVP Manager executeable get installed on the firewall module or the management station or someplace else?
Is it only available for NT and Solaris?
What about for the Nokia platform?

Regards,
Rob S.

 -----Original Message-----
From:   Spadafora, Robert (CA - Toronto) 
Sent:   Tuesday, May 28, 2002 1:05 PM
To:     'FW-1-MAILINGLIST@LISTS.US.CHECKPOINT.COM'
Subject:        Anti Virus and URL filtering using the same URI Resource?

Good-day all,

I'm looking for some clarification on implementing the following:
-FW-1 4.1
-Websense Server 4.4
-eSafe Gateway 3.1

Outbound HTTP rule:
Internal-Net   Any   HTTP-Resource   Accept

If I have two seperate CVP servers (i.e. the Wedsense server and the eSafe gateway) how do I insure that internal users browsing the Internet are prevented from going to inappropriate sites by Websense while at the same time having HTTP downloads checked for viruses by eSafe?

My understanding is that you can only define one CVP server per HTTP resource.

If I were to create two rules with two seperate HTTP reources (one for Websense and one for eSafe) I feel this would not be a proper solution as all outbound HTTP traffic would be handled only by the first rule it encountered.

What about creating one rule with two HTTP reources in it (one for Websense and one for eSafe) - would that work?

Regards,
Rob S.