Re: [FW-1] Transparent User Auth?

["Hamilton, Kent" <KHamilton@FW1-NOSPAMHUNTER.COM>]

Does the MetaIP integration with FW-1 still work?  We have 5.1 of it here
and nowhere in the docs is it mentioned anymore. Of course I never got it to
work correctly when I last tried it a couple years ago.

--
Kent Hamilton KHamilton@Hunter.COM
Manager - Systems & Networking
Hunter Engineering Company



> -----Original Message-----
> From: Lars Troen [mailto:Lars.Troen@PROXYCOM.NO]
> Sent: Tuesday, February 25, 2003 2:18 PM
> To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Subject: Re: [FW-1] Transparent User Auth?
>
>
> It's possible to do this, but you need an addon, but it's not
> exactly a third party addon as it's Checkpoint software,
> namely MetaIP.
>
> Other and cheaper ways of solving this particular problem
> would be to use a proxy server that could utilise transparent
> user authentication. Both MS Proxy/ISA Server and Squid (with
> compiled in addons for AD and SMB) could do this.
>
> The simplest way would however be to restrict the access of
> the computers these users are using from accessing the
> internet. This could be done by assigning predefined ip
> addresses to these computers that would have a blocked access
> rule on the firewall or you I guess you could do it with some
> creative use of group policies.
>
> Lars
>
>
>       -----Original Message-----
>       From: Hamilton, Kent [mailto:KHamilton@HUNTER.COM]
>       Sent: Tue 25-Feb-03 7:18 PM
>       To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
>       Cc:
>       Subject: [FW-1] Transparent User Auth?
>
>
>
>       We use FW-1 NG SP2 on Secure Platform with mixed NT
> domains and Active
>       Directory (Migrating to AD only).
>       I've been asked to block specific users from browsing
> the web without
>       forcing them to log in manually through the firewall.
> Is that possible
>       without third party add-on's?
>
>       I asked our vendor last week and haven't gotten an answer.
>
>       Any help/suggestions appreciated.
>
>       --
>       Kent Hamilton <Khamilton(at)Hunter.COM>
>       Manager - Systems & Networking
>       Hunter Engineering Company
>
>       =================================================
>       To set vacation, Out Of Office, or away messages,
>       send an email to LISTSERV@lists.us.checkpoint.com
>       in the BODY of the email add:
>       set fw-1-mailinglist nomail
>       =================================================
>       To unsubscribe from this mailing list,
>       please see the instructions at
>       http://www.checkpoint.com/services/mailing.html
>       =================================================
>       If you have any questions on how to change your
>       subscription options, email
>       fw-1-owner@ts.checkpoint.com
>       =================================================
>
>
> N jà´ 9â~' k)Æ z éÖzf
> !$æ  elè!yæ))rÉ^ æØayæVvÇ
> fj)b  b N ry bèf)+-äW zæ^{--Êjæm >  $à&æÇ' Xà f ZÆØ'ì-Zè
>  *mÈÇj)_Z0ä
> ^rJhä€ {\
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================