CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartDashboard
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-09-28
Junior Member
 
Join Date: 2007-09-17
Posts: 7
Rep Power: 0
madking has an average reputation (10+)
Default Source Null object -> Permit any ?

Hello,
I have following object-type address range, with nothing specified.
Name Type IP Netmask
Srv_Support Address Range - -

This object is used in following policy:
NO. SOURCE DESTINATION SERVICE ACTION TRACK INSTALL ON
101 Srv_Support Srv_Gateway Group_Srv accept Log fwwi1.oam

The result of this combination from null object and the policy rule is it permit any ?

I tried to find my answer in Checkpoint documentation which I have but no success

Thank you for help,
Mike
Reply With Quote
  #2 (permalink)  
Old 2007-09-28
Senior Member
 
Join Date: 2007-06-04
Posts: 1,062
Rep Power: 3
mcnallym has an average reputation (10+)
Default Re: Source Null object -> Permit any ?

Are you saying that you have an address range object that has no first or last IP specified, or that you have used 0.0.0.0 as the IP addresses.
Reply With Quote
  #3 (permalink)  
Old 2007-09-28
Junior Member
 
Join Date: 2007-09-17
Posts: 7
Rep Power: 0
madking has an average reputation (10+)
Default Re: Source Null object -> Permit any ?

ok, my mistake and please accept my appologies

my presumes was based on html exported from Smartcenter using Checkpoint's tool. in this html appears -, no 0.0.0.0 or something else. But having a 2nd look on SmartDashboard at address range objects looks ok, it has even IP's !!!

looks like there is a bug in this export tool.again here a copy paste from exported html:
Name Type IP Netmask Products installed NAT Address Members Version Comments
Srv_Support Address Range - - - - - N/A A-Team

If it was 0.0.0.0, yes that would be clear that is 'any'.

Thank you so much for your time. I consider topic closed from my point of view.

Mike
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 13:12.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0