NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] HTTPS issue with NG FP3 user auth



Do you need to allow both ports 444 and 443 to pass through the fw?
Do you need to allow ident port 113 - I don't believe secure applications use this port anymore - not sure.
If you open the firewall wide open, what happens?
http://www.iss.net/security_center/advice/Exploits/Ports/default.htm

This one probably doesn't apply.
http://www.microsoft.com/windows2000/techinfo/planning/security/kerbsteps.asp

Curious.  What parameters did you change in userc.C?

Elmar van Mourik <[email protected]> wrote:
As far as I know user auth is NOT working with https in FP 3.
For that reason I want to upgrade to AI in the near future.

Elmar van Mourik

-----Oorspronkelijk bericht-----
Van: Vijay [mailto:[email protected]]
Verzonden: donderdag 18 september 2003 15:16
Aan: [email protected]
Onderwerp: [FW-1] HTTPS issue with NG FP3 user auth


Dear Checkpoint Gurus!!
I have written this issue before but did not get any
answers so thought I shall try again...I am Installing
Checkpoint NG FP3 On windows 2k box.
I am having this rule.
Internal@user https, http User Auth.<----Rule
Number 1
initially user auth was not working for http but after
changing 3 http parameters in object_5_0.c user
authentication started working for HTTp sites only.
For https sites like hotmail or for that matter
checkpoint secure knowledge i was not able to get any
page in the browser. On the firewall I am getting the
accept for https requests.
Any one has any clue? Please please reply ....badly
require solution for this.
Regards
Vj

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================


Door de electronische verzending van het bericht kunnen er geen rechten
ontleend worden aan de informatie. Als u deze e-mail onterecht heeft
ontvangen, waarschuwt u dan de afzender via [email protected] en verwijder
de gegevens van de computer.

Zuiveringsschap Hollandse Eilanden en Waarden, Dordrecht
tel: +31 (0)78 6397100
fax: +31 (0)78 6311871
web: http://www.zhew.nl

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================


Christopher J. Dias - CCSA, CCSE (Checkpoint), MCP + I,MCSE, (Microsoft),  CCNA, CCNP (Cisco). CSE (Novell)
Cím:1121 Budapest
Fülemile út 12-18 4.ép.3/11.
Telefon: 36 1 275-4008 Mobil:06-20/803 9687
[email protected]


---------------------------------
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.