Re: Help Checkpoint Firewall-1 NGX : stream redirecting
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Re: Help Checkpoint Firewall-1 NGX : stream redirecting

From: Wayne McGlinn <wayne@removeme.murrumba.net>
Date: Wed Apr 05 2006 - 10:16:58 CEST

"Bertrand" <bertrand_rp@hotmail.d0t.fr> wrote in message
news:iN6dnfLJ2t3ldK_ZRVnyiQ@giganews.com...
> Hello,
>
> I m a newbi in Checkpoint environnement.
>
> Maybe can someone help me.
>
> I use Checkpoint Firewall-1 NGX 6.0 and want to redirect HTTP
> streams to a proxy server wich will perform URL filtering.
>
> Is there a way to do so? And how can I perform such a configuration?
>
> I guess the answer is yes because it's would be a line using IP
> Tables.
>
> Thank you in advance
> --

Get hold of the original NGX CD's and check the /Docs folder on CD2
(Windows/Solaris CD). In there you'll find *all* the pdf's needed to
administer your system.
What you're looking for is "Security Server" in particular, a HTTP Security
Server that will re-direct HTTP traffic using UFP (URL Filtering Protocol).
Works fine, the only downside is a 10% - 15% CPU hit. *Most* Checkpoint
Firewalls run at about 1% - 5% utilization, so it shouldn't be too much of a
problem.
Post back here if you need more help, it's hard being new to Checkpoint
sometimes :)

Wayne McGlinn
Brisbane, Oz

ps: NGX is also known as R60 (Release 60) At the moment, Checkpoint are up
to HFA03 of R60. It helps to post questions as " I'm running NGX HFAxx" etc
etc :)
Received on Mon May 1 01:05:17 2006