Re: [FW-1] M$ Terminal services with NG FP2 Win2k

[michal kolarik <michal.kolarik@FW1-NOSPAMAUTOCONT.CZ>]

Hi,

in this scenario we must have remote control.
I know it is not absolutely secure, but we reserved  special interface
for managment use only. This interface is connected to our support
center only.
I need to know if it is feature of FW-1 FP2 that there can't be instaled
terminal services on server?
Does the same think FP2 on Solaris with ssh?
Thanks for any comment

Michal

On St, 2002-06-05 at 09:34, Elmar van Mourik wrote:
> Hi Michal,
>
> Keep it secure... Don't use any remote control tool on your firewall. So, I
> don't think it's strange that CP disables any possible "security hole". With
> M$ Terminal Services (or PCAnywhere eg.) running on a firewall, anyone can
> connect to it and disable or change any service or security policy.
>
> Elmar van Mourik
> System & Networkmanagement ZHEW
>
> -----Oorspronkelijk bericht-----
> Van: Kolarík Michal [mailto:Michal.Kolarik@autocont.cz]
> Verzonden: dinsdag 4 juni 2002 16:00
> Aan: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Onderwerp: [FW-1] M$ Terminal services with NG FP2 Win2k
>
>
> Hi all,
>
> I have just instaled NG FP2 on Win2k server.
> I got problem. When I instaled CP FW-1 FP2 ->  Terminal services was
> disabled.
> When I set u TS as automatic and I reboot server -> Cp Firewall-1 service
> was disabled.
> When I enable one of this services other one is disabled  ( windows disabled
> it).
> Does anyone meet with this strange behaviour?
>
> Thanks for any comment
>
> Michal
>
> ------------------------------
> Door de electronische verzending van het bericht kunnen er geen rechten
> ontleend worden aan de informatie. Als u deze e-mail onterecht heeft
> ontvangen, waarschuwt u dan de afzender via postmaster@zhew.nl en verwijder
> de gegevens van de computer.
>
> Zuiveringsschap Hollandse Eilanden en Waarden, Dordrecht
> tel: +31 (0)78 6397100
> fax: +31 (0)78 6311871
> web: http://www.zhew.nl
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================