[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] HTTPS issue with NG FP3 user auth
Do you need to allow both ports 444 and 443 to pass through the fw? Do you need to allow ident port 113 - I don't believe secure applications use this port anymore - not sure. If you open the firewall wide open, what happens? http://www.iss.net/security_center/advice/Exploits/Ports/default.htm This one probably doesn't apply. http://www.microsoft.com/windows2000/techinfo/planning/security/kerbsteps.asp Curious. What parameters did you change in userc.C? Elmar van Mourik <[email protected]> wrote: As far as I know user auth is NOT working with https in FP 3. For that reason I want to upgrade to AI in the near future. Elmar van Mourik -----Oorspronkelijk bericht----- Van: Vijay [mailto:[email protected]] Verzonden: donderdag 18 september 2003 15:16 Aan: [email protected] Onderwerp: [FW-1] HTTPS issue with NG FP3 user auth Dear Checkpoint Gurus!! I have written this issue before but did not get any answers so thought I shall try again...I am Installing Checkpoint NG FP3 On windows 2k box. I am having this rule. Internal@user https, http User Auth.<----Rule Number 1 initially user auth was not working for http but after changing 3 http parameters in object_5_0.c user authentication started working for HTTp sites only. For https sites like hotmail or for that matter checkpoint secure knowledge i was not able to get any page in the browser. On the firewall I am getting the accept for https requests. Any one has any clue? Please please reply ....badly require solution for this. Regards Vj __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Door de electronische verzending van het bericht kunnen er geen rechten ontleend worden aan de informatie. Als u deze e-mail onterecht heeft ontvangen, waarschuwt u dan de afzender via [email protected] en verwijder de gegevens van de computer. Zuiveringsschap Hollandse Eilanden en Waarden, Dordrecht tel: +31 (0)78 6397100 fax: +31 (0)78 6311871 web: http://www.zhew.nl ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Christopher J. Dias - CCSA, CCSE (Checkpoint), MCP + I,MCSE, (Microsoft), CCNA, CCNP (Cisco). CSE (Novell) Cím:1121 Budapest Fülemile út 12-18 4.ép.3/11. Telefon: 36 1 275-4008 Mobil:06-20/803 9687 [email protected] --------------------------------- Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|