CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartDefense
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-01-23
Junior Member
 
Join Date: 2005-10-18
Location: Newcastle - UK
Posts: 14
Rep Power: 0
Bikky has an average reputation (10+)
Default bypass SmartDefence

Does anyone know if its possible to set an individual node(s) to bypass the smartdefence?

I have problems with a system where its sending messages using port 433, but SD picks it up as a worm type, and is blocking with the message "unable to parse http subheader", and as its not web traffic I don't want these features checked for this machine.

For the time being i've disabled my worm catcher :s

thanks.
__________________
OOO - Look.....

a Hole......
Reply With Quote
  #2 (permalink)  
Old 2007-01-23
Senior Member
 
Join Date: 2006-07-28
Location: New Zealand
Posts: 857
Rep Power: 3
northlandboy has an average reputation (10+)
Default Re: bypass SmartDefence

HTTP worm catcher can be set to only protect specific web servers.

You could create a new service for this specific rule, that doesn't use HTTP as its protocol type
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:36.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0