Any Netscreen Experts Out There??

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hi All

Long time on see/chat/post.....I could go on, but I wont.

Having recently become a single man again I feel it's time to take my mind of everything and dive back into the learning as it has been onthe back burner for far too long over the last year or so.

My first challenge is to configure port forwarding on my firewall (Netscreen 5XP).

I have 2 applications that can conect to one of my servers from the internet and together they use 3 different services

Data
Command
and RPB (remote playback)

I have defined a service on the firewall for each of these setting up the protocol and the ports etc, I have also created a group that contains the above services/protocol stacks.

My question is this, do I need to define a VIP for each of the above aswell or just 1 VIP for the group.

Thanks

Nelix

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

I thought u assigned the vip to an interface and a policy to a vip
and the policy would have all your forward rules?

could be wrong, been a while since i used a netscreen

 

You could well be right Phoenix, I am just working from a document I found on the net and it's not terribly clear.

the doc says to create a new VIP for each of the services (Data, Command and RPB) on the untrust interface.

Just wanted a little more clarity on the situation.

 

http://www.derkeiler.com/Newsgroups/comp.security.firewalls/2004-09/0355.html

found a config there that seems to demonstrate port forwarding
but it only forwarding one service by the way