CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Miscellaneous
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-03-08
Junior Member
 
Join Date: 2007-03-20
Posts: 11
Rep Power: 0
toastyhamster has an average reputation (10+)
Default UTm Message Security SMTP transparent logs

Hi,

I suspect this is a stupid question, but I'm new to message security and UTMs so....

When I enable AV on the gateway and move the slider to "block", *all* mail gets rejected and then accepted. There's no info in the logs as to why it was rejected, just that it's on rule 0 by the transparent smtp, the following accept is also on rule 0, also by transparent smtp.

Is this just a quirk of the logging or is there a problem here? I was expecting to see logs if a virus was detected, other than that I'd expect it to be logged by the explicit rule and passed to NAT etc. As it is it's being rejected/accepted on rule 0 and also NATd, this makes it look like any explicit SMTP rules are not required? Seems a bit odd to me.

Thanks
__________________
Mike
CCSA/CCSE/CCSE+/CCMSE/CCNA/NSA
Reply With Quote
  #2 (permalink)  
Old 2008-03-08
Senior Member
 
Join Date: 2007-07-16
Posts: 625
Rep Power: 2
Thorpuse has an average reputation (10+)
Default Re: UTm Message Security SMTP transparent logs

The logging in Messaging Security is pretty dreadful, which is a strange claim to make against Check Ponit, seeing you'll usually get every piece of obscure log information you could possibly need. The rejecting of all mail sounds like a misconfiguration - have you checked to see if the mail actually gets through or not?
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 12:51.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0