NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Permitting entire domains for http/ftp Norton Liveupdate



Hi,

> I am wondering if anyone has a solution for Checkpoint to allow all
> http/ftp traffic from liveupdate.symantec.com to be allowed outbound to
> retrieve liveupdates.  I have noticed that liveupdate.symantec.com
> resolved to many IP addresses and simply creating a host object for each
> address will not work.

> Any ideas?

If I had to do that, I would create a host-object for each IP# and
would put all in a group and allow outbound-traffic to the group for
ftp and http.

I saw 3 IP# for liveupdate.symantec.com, why wouldn't it work to
create a host-object for each of those three IP#?

Do they often change their IP#?

HTH
Christian
--
Aus einer Versicherungsmeldung: Als ich auf die Bremse treten wollte, war
diese nicht da.
Christian Schlegel - http://rana.at - [email protected]

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.