Search found 5 matches

by Rob
25 Jul 2018, 08:00
Forum: SG Discussions
Topic: Service settings "Forward ICMP errors" and "Enable IPv4 Path MTU Discovery"
Replies: 3
Views: 1258

Re: Service settings "Forward ICMP errors" and "Enable IPv4 Path MTU Discovery"

Hi Michael, Ah, my mistake. You are correct in thinking something was missing, and that's in how I delivered the part of the response you quoted regarding Min TTL. When I wrote it, I had in mind a security aspect of allowing traceroute responses from remote hosts (or in this case, masking traceroute...
by Rob
11 Jul 2018, 13:14
Forum: SG Discussions
Topic: Service settings "Forward ICMP errors" and "Enable IPv4 Path MTU Discovery"
Replies: 3
Views: 1258

Re: Service settings "Forward ICMP errors" and "Enable IPv4 Path MTU Discovery"

Hi Michael, Interesting question, one for which I can hopefully give an equally interesting response :). I'd say in this day and age, the settings you mention here aren't really considered to be as big a security hole as they once were, depending of course on how a network has been configured. In ol...
by Rob
29 Mar 2018, 11:54
Forum: SG How to's
Topic: How to approach FTPS (without opening too many ports)
Replies: 0
Views: 1698

How to approach FTPS (without opening too many ports)

This How-to applies to: Clavister Security Gateway 10.x. up to and including latest version Table of contents: • Objectives with this article. • An explanation of the differences between FTP, FTPS and SFTP. • Some ideas on what type of file transfer software to choose from. • Example of how to conf...
by Rob
07 Sep 2017, 10:34
Forum: InControl FAQ's
Topic: How to optimize InControl Log File storage
Replies: 0
Views: 1566

How to optimize InControl Log File storage

This How-to applies to: Clavister InControl - all versions Table of contents: •Description •Objectives with this article •Optimisation Scenarios Description In some environments handling many gateways, if InControl is configured to collect logs from these gateways, it's entirely possible that stora...
by Rob
23 Feb 2017, 12:39
Forum: SG FAQ's
Topic: Problems establishing tunnels between Clavister SGW and Draytek firewalls
Replies: 0
Views: 2194

Problems establishing tunnels between Clavister SGW and Draytek firewalls

This FAQ applies to: Clavister CorePlus / cOS Core all versions / Draytek firewalls Question: I'm unable to establish a tunnel between Clavister and Draytek, and seeing "incorrect pre-shared key" log events, even though I'm sure correct PSK is used and correct tunnel is triggering Answer: We have n...