🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #375

Re: checkpoint secure client VPN-1

#375
From: zenner zenner
Date: Thu, 15 Apr 2004 13:04
63 lines
3700 bytes
Microsoft clients have GPO (group policy/system policy) to enforce
configurations within he Domain. The post did not mention what OS the client
are running; however, using SecureClient on the LAN can be useful in
enforcing similar strictures.

So, one obvious question...what OS is running on the client machines...why
not use group policies or system policies instead (if you are running NT or
W2K/W2K03)? By the way none of your clients are running Win 95, which is no
longer supported for SecureClient.
"Chris" <chris@domain.com> wrote in message
news:KkudnYotZMDE3-PdSa8jmw@karoo.co.uk...
>
> "Chris Moore" <nospam@myaddress.com> wrote in message
> news:Mulfc.5010$fq4.3367@lakeread05...
> > I have the following problem:
> >
> > When PC's with the SecureClient are on the LAN the software reverts to
the
> > Default policy and the firewall blocks all traffic coming to it i.e. I
> > cannot ping the clients nor push my Antivirus installations, access
> shares,
> > etc.
> >
> > If I Disable the default policy i.e. no protection, everything works
fine
> >
> > If I log in from an external internet connection then I get the
> personalised
> > policy loaded and everything works fine as it should.
> >
> > How can I get the clients to behave properly on the LAN so they are
> > accessible for management purposes.  Why do they not default to the
policy
> > server and use the personalised policy, why do they use the default and
> > block everything??
> >
> > I have setup as far as I know correctly the FW and client software -
have
> > followed the VPN client install guide from the Checkpoint site.
> >
> > Any advice would be greatly appreciated!!!
> >
> > Checkpoint Firewall 1 NG FP3
> > Checkpoint SecureClient various builds all with the same issue
> >
> > Thanks
> >
> > Chris
> >
>
>
> Are you saying that your clients are on a LAN behind the firewall and have
> SecureClient active? Why would you use SecureClient on the LAN?
>
> Chris.
>
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.657 / Virus Database: 422 - Release Date: 4/13/2004
Technical Details
Message-ID: <DLvfc.37034$Kq5.19589@newssvr29.news.prodigy.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!news.glorb.com!newshosting.com!nx02.iad01.newshosting.com!news-feed01.roc.ny.frontiernet.net!nntp.frontiernet.net!prodigy.com!newsmst01a.news.prodigy.com!prodigy.com!postmaster.news.prodigy.com!newssvr29.news.prodigy.com.POSTED!366cc36b!not-for-mail
References: <Mulfc.5010$fq4.3367@lakeread05> <KkudnYotZMDE3-PdSa8jmw@karoo.co.uk>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,45fc92d64770592b
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,45fc92d64770592b
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2004-04-15 06:05:03 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!news.glorb.com!newshosting.com!nx02.iad01.newshosting.com!news-feed01.roc.ny.frontiernet.net!nntp.frontiernet.net!prodigy.com!newsmst01a.news.prodigy.com!prodigy.com!postmaster.news.prodigy.com!newssvr29.news.prodigy.com.POSTED!366cc36b!not-for-mail
From: "zenner" <zenner<nospam>@pacbell.net>
Newsgroups: comp.security.firewalls,cp.products.firewall-1
References: <Mulfc.5010$fq4.3367@lakeread05> <KkudnYotZMDE3-PdSa8jmw@karoo.co.uk>
Subject: Re: checkpoint secure client VPN-1
Lines: 65
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
Message-ID: <DLvfc.37034$Kq5.19589@newssvr29.news.prodigy.com>
NNTP-Posting-Host: 63.195.121.217
X-Complaints-To: abuse@prodigy.net
X-Trace: newssvr29.news.prodigy.com 1082034275 ST000 63.195.121.217 (Thu, 15 Apr 2004 09:04:35 EDT)
NNTP-Posting-Date: Thu, 15 Apr 2004 09:04:35 EDT
Organization: SBC http://yahoo.sbc.com
X-UserInfo1: OX_YBY_DPRRS@^LYMRKNOPDA[X_LPO@FKY\@LWQHBATBTSUBYFWEAE[YJLYPIWKHTFCMZKVMB^[Z^DOBRVVMOSPFHNSYXVDIE@X\BUC@GTSX@DL^GKFFHQCCE\G[JJBMYDYIJCZM@AY]GNGPJD]YNNW\GSX^GSCKHA[]@CCB\[@LATPD\L@J\\PF]VR[QPJN
Date: Thu, 15 Apr 2004 13:04:35 GMT