Security after establishing VPN

[Chris Brenton]

Michael Louie wrote:
>
> Does Checkpoint version 4 and later have any built in security for restricting
> access after a VPN connection is established (port 110 to the mailserver only
> for example)?  -or am I pretty much forced to purchase an additional firewall?

Nope, you can implement ACL's as well. Something like:

Source: ANY
Destination: pop3.fubar.com
Service: POP-3
Action: Encrypt

Will force all POP-3 to your server to be encrypted but prevent users
from accessing the same service on other machines in your environment.

HTH,
Chris
--
**************************************
cbrenton at sover.net

* Mastering Cisco Routers
http://www.amazon.com/exec/obidos/ASIN/078212643X/
* Mastering Network Security
http://www.amazon.com/exec/obidos/ASIN/0782123430/

VPN is sponsored by SecurityFocus.COM