Security

Ask something
Discussion Locked

Checkpoint FW-1: Basic Admin Question

0 helpful
8 replies

by msenkbeil

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I'm new to Checkpoint FW-1... a client of mine has had me modify the configuration several times to allow incoming traffic on specific ports. I've usually had no problem making a new policy file and uploading it to the Checkpoint hardware device. Since the client got a new PC running XP Pro (formerly running NT4) we've not been able to run the Policy Editor program. We're running firmware v. 3.2.1-fca1 rel 849. The policy editor always reports "No response from server!" when I try to connect using the Policy Editor... then it displays "Verify that this machine is an authorized GUI client". I don't know where to authorize it... I've looked all over the HTTP interface of the firewall and don't see this anywhere. I need help!

8 replies

by wroming

Since it is an XP box xp has a built in firewall as well. So what you have to do is going into the network settins and turn the firewall off of the local machine. It defaults to the on position when installed. A lot of users are un aware of that. I hope this helps.

by msenkbeil

Sorry, forgot to tell you I've tried the Profile Editor on other Win2000 Server boxes as well... same results.

by tony

It sounds like the IP Address of the connecting host has chaned. Thus CP (FW1) will not allow you to connect.

Do you have console access (unix) or access to the firewall desktop (NT/Windows).

If so you can add the new PC's IP Address to thelist of allowed clients.

- - - -

If the IP Address has not changed, has the MAC Address? This can also be a limiting factor.

Regards,
Tony

p.s. If you want more clarification. Just drop me an email.

by some guy in seattle

You need to tell the firewall what IPs are allowed to access it. Log on to the console of the firewall, run "cpconfig" (no quotes) and you can add the IPs of authorized GUI clients.

Hope that helps -

This discussion is closed to new replies.