CheckPoint Problem on DHCP

- W
- wesley.mks
  
  Contact options for registered users
posted
17 years ago

Fri, Jul 7, 2006 5:08 AM

Hi,

I have a problem on Checkpoint recently, all the DHCP client can't access internet fully(just can access a few web site) thought checkpoint. And i had check the log but havn't found any not accept in there. So i had create a new configuration and input the rule again. Every thing work prefectly again. But after a few days, this accident was happened again. Every thing was worked over one year without any problem. So can you tell me what is the problem?

Firewall : Checkpoint 4.1on Windows NT4 with SP6 DHCP Server : Windows NT4 with SP6

Thanks,

Wesley

- D
- die.spam
  
  Contact options for registered users
Vote on answer
posted
17 years ago

Mon, Jul 10, 2006 12:37 AM

Well I think something must have changed for it to stop working after a week all by itself, so what your saying is they can access a websites but not full internet access..well that could just be cached somewhere..

what are you using for your default gateway? are your rulebase allowing for the entire DHCP IP scope, set your DHCP server to give the same ip to the same host where possible.

Have you recently run any software updates, are you running revision checking? has a new database version been created (meaning the rulebase has changed..)

if there arent any access logs in checkpoint then that means either the packets are being dropped before then, or your last rule on the firewall hasnt got the log option set, set log on all your rules then check logs, perhaps an upper rule is misconfigured and denying the traffic.

Flamer.

snipped-for-privacy@gmail.com wrote:

- M
- Me
  
  Contact options for registered users
Vote on answer
posted
17 years ago

Mon, Jul 10, 2006 1:42 AM

Fo starters:

You're running a firewall on an ancient Windows OS

Your Windows OS has been unsupported and has had no patches for over a year and a half.
Your Check Point version has not had any patches in a couple of years and is unsupported. There are several known exploits to bypass it.

Your DHCP server is on NT 4 is well.

Dude, NT 4 was written for the threat environment of 1993.

Time to join the 21st century and get systems that can handle the threat environmment of 2006.

JJ