About blacksan

Use plug-ins to test the website like HTTPWatch or Fiddler to verify that the URL/ACL matches what is needed for the website. When I go to: https://www.stockbrokers.barclays.co.uk/idv/Login1.asp?category=&usecase=login&popup=& I see these websites as part of the Main page "Get Request": https://rd.clickshift.com/js/convert.js https://switch.atdmt.com/action/0w1sto_BARXlogin_1 https://barclays.touchclarity.com/c?siteID=406&ts=1311003466750&ccID=BST_Login_RHS_Top&log=no&location=https%3A%2F%2Fwww.stockbrokers.barclays.co.uk%2Fidv%2FLogin1.asp%3Fcategory%3D%26usecase%3Dlogin%26popup%3D%26&tagv=5.3&tz=-240&r=empty&title=Barclays%20Stockbrokers&cd=32&ah=870&aw=1440&sh=900&sw=1440&pd=undefined https://statse.webtrendslive.com/dcsiiriph10000golxgl12j01_5y5u/wtid.js https://statse.webtrendslive.com/dcsiiriph10000golxgl12j01_5y5u/dcs.gif?&dcsdat=1311003469046&dcssip=www.stockbrokers.barclays.co.uk&dcsuri=/idv/Login1.asp&dcsqry=%3Fcategory=%26usecase=login%26popup=%26&WT.co_f=71.22.216.247-1568811280.30164320&WT.vtid=71.22.216.247-1568811280.30164320&WT.vtvs=1311003471421&WT.vt_f_tlv=0&WT.sp=BarclaysStockbrokers&WT.tz=-4&WT.bh=11&WT.ul=en-us&WT.cd=32&WT.sr=1440x900&WT.jo=Yes&WT.ti=Barclays%20Stockbrokers&WT.js=Yes&WT.jv=1.3&WT.ct=lan&WT.hp=0&WT.bs=1419x100&WT.fv=10.0&WT.slv=Unknown&WT.tv=8.6.2&WT.dl=0&WT.ssl=1&WT.es=www.stockbrokers.barclays.co.uk/idv/Login1.asp&WT.vt_f_tlh=0&WT.vt_f_d=1&WT.vt_f_s=1&WT.vt_f_a=1&WT.vt_f=1 ... View more

Need to create a rule above the PBF for the Security Appliance to avoid the loop. Source Zone / I.f.:  ethernet 1/3 Source Address:  10.2.43.20 Source User:  any Destination Address:  any Application:  any Service:  any Action:  no-PBF ... View more

if you like XML format, then use the Checkpoint Config Wizard (CPConfigWiz). This will take your SmartCenter config and make a XML version.  Now the data (Objects, FW Rules, NAT Rules) are easy to move around. Just remember to create NAT rules in the PA for all of the objects with Automatic NAT in the Checkpoint. You can grab the Config Wizard from support.checkpoint.com ... View more

Setup a Capture Portal with Authenticates against Cisco ACS for those users. Then create a rule which allows those users (once Authenticated) to access the systems via telnet. The only requirement is that the users must go somewhere via Internet Browser to validate themselves. or use the SSL VPN function and encrypt that telnet traffic ... View more