CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Installing And Upgrading
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-11-14
Junior Member
 
Join Date: 2007-11-13
Posts: 4
Rep Power: 0
Remcog has an average reputation (10+)
Default Newby question

Hi Forum,

I am completely new to the checkpoint enviroment and perhaps I am in the wrong area of the forum if so my appologies for this.
Perhaps one of you could point me in the right direction.
I have some doubts as to the function of the following.

click...checkpoint dashboard >> nodes >> properties of the node >> general properties >> configure servers >> and check DNS >> click okay.
What does this function do ?
Hope you can help.
Regards,
Remco
Reply With Quote
  #2 (permalink)  
Old 2007-11-14
Senior Member
 
Join Date: 2006-12-16
Posts: 162
Rep Power: 2
Routerkid1 has an average reputation (10+)
Default Re: Newby question

This add's the box to the DNS servers view of Smart Defense.
Reply With Quote
  #3 (permalink)  
Old 2007-11-14
Junior Member
 
Join Date: 2007-11-13
Posts: 4
Rep Power: 0
Remcog has an average reputation (10+)
Default Re: Newby question

Thanks for your reply.
Reason for my asking being that I am receiving logging of dropped traffic by SD pertaining Invalid DNS >> reason DNS data to long. This has to do with a DNS zone transfer to a DNS from a 3rd party. I thought that by making my DNS node a DNS server from SD point of view I could avoid SD dropping the traffic. AM I right in assuming this?
Once again I am new to Checkpoint coming from a Cisco environment.
Thanks for your time.
Remco
Reply With Quote
  #4 (permalink)  
Old 2007-11-14
Senior Member
 
Join Date: 2006-01-25
Posts: 920
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Newby question

Quote:
Originally Posted by Remcog View Post
Reason for my asking being that I am receiving logging of dropped traffic by SD pertaining Invalid DNS >> reason DNS data to long. This has to do with a DNS zone transfer to a DNS from a 3rd party. I thought that by making my DNS node a DNS server from SD point of view I could avoid SD dropping the traffic. AM I right in assuming this?
I believe by adding the DNS into this list you are subjecting it to *more* SD checks, not less. Try disabling your DNS SD checks and push your policy again--see if that helps.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 02:08.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0