RE: [FW1] Firewall-1 4.0 and Implicit Authentication

[Steve Ribble <steverib@fyiowa.com>]

I have tried a similar setup again today without success, since
upgrading to version 4.0.

5	test@any	any	ftp	ClientAuth	Long	GW
6	test@any	any	http	UserAuth	Long	GW
7	any		any	any	Drop		Long	GW

After firing up a browser I get the authentication window and am
accepted by rule 6. I then fire up my WS_FTP client without any firewall
information. That connection is rejected by rule 7. If I add the
firewall information (remoteid@FW1id@remotehost) I am accepted by rule
5.

This rulebase worked fine in 3.0b.

This tells me 2 things, FW1 does see rule 5, Implicit Authentication
DOES NOT WORK on FW1 4.0.

> -----Original Message-----
> From: Dameon D. Welch [mailto:dwelch@hotmail.com]
> Sent: Tuesday, April 27, 1999 7:31 PM
> To: jake.rog@ttcmail.com; FW1 Mailing List
> Subject: Re: [FW1] Firewall-1 4.0 and Implicit Authentication
> 
> 
> 
> I have a feeling it's because your client auth properties are not set
> correctly. Check to see that the timeout is set adequately 
> and that the
> number of connections allowed is "infinite" (or a really high number).
> 
> -- PhoneBoy
> 
> > Thank you. I have tried to reverse the order:
> >
> > All@any     any     http     ClientAuth   Long     GW
> > All@any     any     http     UserAuth     Long     GW
> >
> > No luck, the client is still being asked to authenticate on 
> every request,
> > just like the ClientAuth Rule is NOT working?  I have also tried the
> > ImplicitAuth with SessionAuth with the same result. Back in the same
> court.
> > What else I can check for?
> 
> 
> ==============================================================
> ==================
>      To unsubscribe from this mailing list, please see the 
> instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
> 


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================