CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartDefense
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-09-16
Junior Member
 
Join Date: 2006-07-13
Location: Georgia, US
Posts: 12
Rep Power: 0
gt2847c has an average reputation (10+)
Send a message via ICQ to gt2847c Send a message via AIM to gt2847c Send a message via Yahoo to gt2847c
Default Can't Join Vista RC1 PC through CP NGX R61

I have a VPN setup between the site with a 2003 SP1 DC and a remote site with a new Vista RC1 PC. I have been trying to add the Vista PC to the domain but keep getting a SmartDefense error on DCE-RPC Enforcement Violation - UUID is not allowed through rule base. No rule number is recorded so I'm not sure if any of the KB articles apply here. I'm running NGX R61 with the latest SmartDefense updates and have turned on the "Allow DCE-RPC interfaces other than End-Point Mapper on 135" and I've also turned off the "Block multiple context bind".

The UUID shown in the drop is "e3514235-4b06-11d1-ab04-00c04fc2dcd2" so I defined a DCE Resource object and created a rule to permit that. I've gone through the KB article and changed the dcerpc.def entry #define ALLOW_135 to 1 and repushed the rules... At this point, I've exhausted all my usual items without putting in a support call.

If anybody has any ideas, I'd appreciate it...

Thx
Reply With Quote
  #2 (permalink)  
Old 2006-09-16
Senior Member
 
Join Date: 2006-06-14
Location: The Netherlands
Posts: 153
Rep Power: 3
dbedit has an average reputation (10+)
Default Re: Can't Join Vista RC1 PC through CP NGX R61

Turn off "Allow DCE-RPC interfaces other than End-Point Mapper on 135" and create rule with DC and Vista PC with src and des or vice versa. Create new service tcp-135 and use this in the rule.Also remove the rule with DCE resource object, push policy. Hope this works for you.
Reply With Quote
  #3 (permalink)  
Old 2006-09-18
Junior Member
 
Join Date: 2006-07-13
Location: Georgia, US
Posts: 12
Rep Power: 0
gt2847c has an average reputation (10+)
Send a message via ICQ to gt2847c Send a message via AIM to gt2847c Send a message via Yahoo to gt2847c
Default Re: Can't Join Vista RC1 PC through CP NGX R61

Worked fine, thx...
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:26.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0