Re: VPN Wire Mode

How much do you trust the people and physical access
controls in Mexico? How locked down are their computers and
the network? If something gets loose on the Mexico network
it could travel unimpeded into the rest of the company.
That's a risk I was not prepared to take with our Asian
subsidiaries even though they were our employees.

Ray

> Date: Sun, 11 May 2008 09:42:59 -0500
> From: jlindblomMICO.COM
> Subject: [FW-1] VPN Wire Mode
> To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
> 
> While preparing to add a second external interface and
a T1 to have a
> dedicated T1 for a site-to-site VPN with an Edge device
and remote VPN
> users I ran across "Wire Mode".  I currently
am not using Wire Mode for
> this Site-to-Site VPN with a branch office, it appears
if I enable this I
> could see better performance, any reason I wouldn't
want to enable Wire
> Mode for this VPN?  This Branch office is a building we
have in Mexico, the
> Edge firewall at that location controls their access to
the internet and
> the VPN to the NGX Splat firewall at this location, I
would think this
> would be considered trusted.
> 
> It appears to enable Wire Mode, I just need to enable
it on the VPN
> Community and the NGX firewall object.  I don't see any
Wire Mode settings
> on the Edge object.
> 
> John
> 
> 
> Scanned by Check Point Total Security Gateway.
> 
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================

____________________________________________________________
_____
Make Windows Vista more reliable and secure with Windows
Vista Service Pack 1.
http://www.windowsvista.com/SP1?WT.mc_id=hotmailvi
stasp1banner


Scanned by Check Point Total Security Gateway.


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ray wrote:
| How much do you trust the people and physical access
controls in
Mexico? How locked down are their computers and the network?
If
something gets loose on the Mexico network it could travel
unimpeded
into the rest of the company. That's a risk I was not
prepared to take
with our Asian subsidiaries even though they were our
employees.

Actually 100% of all major malware infestations we have seen
with
customers are due to lack of policy to allow only the bare
minimum over
the VPN links.

It's a hit one office and get the rest of the corporation
for free
nightmare.

Hugo.

- --
hvdkooijvanderkooij.org               http://hugo.vanderkooij.
org/
PGP/GPG? Use: http://hug
o.vanderkooij.org/0x58F19981.asc

	A: Yes.
	>Q: Are you sure?
	>>A: Because it reverses the logical flow of
conversation.
	>>>Q: Why is top posting frowned upon?

Bored? Click on http://spamornot.org/ and
rate those images.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFIJ4MwBvzDRVjxmYERAt1IAJ9SKNolCXBC5TAUVyHHQt+m1DzoDQCg
jeXX
iW7ceXRbq1LmzZkgwv2RIxk=
=tDA+
-----END PGP SIGNATURE-----

Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================