|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Suggestions for creating a manageable firewall policy
Of course the four source objects could be in a group But if its different ports to different destinations then I can't think of an elegant way of designing it, I would assume that the best way would be to create a destination that includes each host that requires a certain port. rule1 src (4 host) dst (all host that require http) srvc (http) rule2 src (4 host) dst (all host that require tcp-1494) srvc (tcp-1494) etc... Granted I'm sure you thought of this already and are looking for a better way, but it is what I would do. If it makes you feel any better we have well over a hundred rules and thousand objects and things work fine as long as you make descriptive comments. Mitchell E Rowton ------------------- Network Security Engineer CISSP, CCNP, CCDP, CCSA, NSA IAM, Network+ ---------------------------- Free security white papers http://www.rowtonconsulting.com -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of Connell Margo A. (DBM1MAC) Sent: Thursday, January 30, 2003 10:48 AM To: [email protected] Subject: Re: [FW-1] Suggestions for creating a manageable firewall policy I apologize for not being more specific. The four source objects need to talk to all 900 objects. Unfortunately, it is not the same ports for every object. For example one destination may require http, https open. Another may require tcp-1494 and udp-highports. Another needs only http, etc.... Margo A. Connell Global Network Systems Planning & Design ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
