Re: Check Point NG/CICS mainframe question

Murtland, Jerry wrote:

> Does anyone know of any compatability issues between the latest version of
> Check Point NG firewall and CICS mainframe SSL web applications?  I'm
> troubleshooting some issues and it seems that the older version of Check
> Point FP3 didn't have any issues at all, but when you plug in the NG i'm
> getting some dropped sessions on a web application on the CICS mainframe.
> It is intermitent (the biggest problem) but the firewall is the only thing
> that changed in the architecture.

Enable logging for specific rules that try to match something against 
the SSL aplications and see what the firewall matches (a better ideea, 
would be to enable loging for each rule, in case you don't have a lot of 
traffic and see who matches what rule).

> The other thing is that I'm sniffing both inside and outside of the firewall
> and all packets seem to be identical, but ofcourse you can't see anything
> that is encrypted in the packet, only the sizes.  Also, this is being
> managed on an R54 Management station.

afaik, you can manage NG-FP* with the management tools from NG-AI R55.

> Any ideas?
>
> Jerry