Re: [FW-1] Clientless VPN

[Leonardo Boulton <lboulton@FW1-NOSPAMCYBERTECHPROJECTS.COM>]

Hi,
The purpouse of clientless vpn is that if you have an internal http
server, someone from outside can have access to it via https. That's all
I saw from it.

It uses the security server.

In the Check Point Knowledge base there is a very good document on how
to configure it. Basically, you have to create the user certificate, and
install it in the remote users browser (I tested it only with
IExplorer... I hope that it works with Netscape too).
The internal web server have to be Static-Nated. And when an external
user tries to access the public IP, the security server does the SSL
encryption.

In the rulebase you have to set the action to 'user authentication', and
the service to 'https'.

Hope that gives you an idea.

LB.


On Fri, 2003-01-17 at 16:49, Robert Masse wrote:
> Hi
>
> I would like to configure my firewall to act as a reverse proxy w/ssl into
> my network.  From what I can see, "Clientless VPN" seems to support this.
> In the document it says to use HTTP in the rulebase with
> userauthentication.. Wouldn't you need to specify HTTPS and use client
> authentication?  If anyone has set this up, I would enjoy hearing what you
> did.
>
> Also, has anyone used this with SECURID as an authentication device instead
> of using certificates?
>
> Thanks
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================