NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] DMZ to trust zone



Hi,

if you need a radius authentication on a server installed on your
DMZ, I guess there is no choice.

you can perhaps hide the true IP address behind a DMZ address
and tranlate it with the firewall (don't forget the ARP static rule
on the firewall).

be sure to restrict the NAT rule to the radius process only.

nicolas figaro

-----Original Message-----
From: Yuki Arif (JA/EID) [mailto:[email protected]]
Sent: jeudi 9 octobre 2003 12:53
To: [email protected]
Subject: [FW-1] DMZ to trust zone


Hello Al,
I am new in Firewall stuff.

I have 1 question:

Is it OK to open a rule from DMZ zone to trust zone for Radius
accounting traffic ? What is the danger for doing this ?

Thanks in advance.


Best Regards


Yuki

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.