[FW1] HTTP Ports

[Ken Gunther <kgunther@optonline.net>]

>
>Position your Proxy server behind your firewall with an internal address.
  We have made a Network Object-Proxy Outbound Group that includes all the
 services that the Proxy users will be able to use.  Make a two rules
allowing the services out from the Proxy server, and In to the Proxy
Server.  That is one suggestion.
>
	Speaking of proxy servers I have a number of users that need to go to web
servers operating on ports other than 80 (HTTP) and 443 (HTTPS). Is there
anything inherently insecure about this? I have my proxy server on the
inside of my firewall and allow it, rather than the desktops, through to
the outside.

			Ken G.



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================