CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartDefense
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-08-01
bdabral bdabral is offline
Junior Member
 
Join Date: 2005-12-26
Posts: 9
Rep Power: 0
bdabral has an average reputation (10+)
Default Smartdefense and TCP Sequence Verifier

I am having this warning after i enabled the TCP sequence verifier from the smartdefense tab of my management server R55_HFA_12 and push the policy to IP 350 enforcement module.
------------------------
Warning: This gateway supports flows traffic acceleration. TCP Sequence Verifier (SmartDefense) will not be enforced on accelerated connections [ Flows warning no. 66
-------------------------
What i have found from the CP knowledge (sk26137) is:
===============================================
Edit the $FWDIR/lib/user.def file on the SmartCenter Server. Add a table called tcp_f2f_ports that contains destination port numbers of relevant TCP services.
Example:
// Forward-to-Firewall TCP services
tcp_f2f_ports = {
< 5000, 5000>,
< 6000, 6000>,
< 7000, 7010>
};

Save file and exit.

Install Policy.

Protection Solution #1 has performance implications. Connections matching tcp_f2f_ports won't be accelerated.
=============================================
this means that its true for all the Nokia boxes, Wondering if any one here had the same issue?
Also reading from the solution, looks like its an example and i need to write al the server ports number!! which is really a huge list then ...any suggestion here.
Many thanks
Dabral
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 10:21.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0