Search found 32 matches

by SECOIT GmbH
02 Feb 2019, 21:31
Forum: SG Discussions
Topic: HA master/slave IPs and public IPv4/30
Replies: 5
Views: 810

Re: HA master/slave IPs and public IPv4/30

Hi Peter, Many thanks! I wasn't aware that the Master/Slave private IP addresses can be "invalid" (in terms of not in the IP subnet as defined within "Interface -> General -> IPv4 -> Network"). So that's good to know! Will using such an "invalid" IP address require to disable heartbeats on this inte...
by SECOIT GmbH
11 Jan 2019, 22:13
Forum: SG Discussions
Topic: HA master/slave IPs and public IPv4/30
Replies: 5
Views: 810

HA master/slave IPs and public IPv4/30

Hi all, How can I properly set HA addresses on the WAN side if an ISP assigns a IPv4/30 subnet? For example the network is 22.0.0.0/30 so that's only one usable address for the customer: 22.0.0.0 - network 22.0.0.1 - provider's gateway / next hop 22.0.0.2 - customer device 22.0.0.3 - broadcast When ...
by SECOIT GmbH
06 Sep 2018, 21:53
Forum: Feature Requests / Product Enhancements
Topic: More control over IDP
Replies: 5
Views: 1148

Re: More control over IDP

Hi Peter,

Many thanks for consolidating and adding the new requests. I appreciate the time and effort you put into this.

Best Regards,
Michael
by SECOIT GmbH
29 Aug 2018, 11:11
Forum: SG Discussions
Topic: Client access VPN recommendation
Replies: 8
Views: 3285

Re: Client access VPN recommendation

Hi Peter, Many thanks again for guiding me to IKEv2. Never used it before you suggested it since I always used OpenVPN whenever possible. Since I use IKEv2 with several setups now I really like it and I even started replacing OpenVPN setups on other firewall gateways with IKEv2. It's just so much fa...
by SECOIT GmbH
29 Aug 2018, 11:00
Forum: Feature Requests / Product Enhancements
Topic: More control over IDP
Replies: 5
Views: 1148

More control over IDP

Hi Clavister team, It would be great to add a little more control over the IDP feature. Currently it's kind of a "all or nothing" setup, which means it's very difficult to have control over individual rules since it's mainly controlled via siganture groups. One example with HTTPS. Reading through si...
by SECOIT GmbH
29 Aug 2018, 10:31
Forum: SG Discussions
Topic: Exclude single IDP signature
Replies: 4
Views: 1071

Re: Exclude single IDP signature

Thank you, Fredrik!
I'll put in a feature request to make this whole thing more usable then.

Thanks,
Michael
by SECOIT GmbH
22 Aug 2018, 15:45
Forum: SG Discussions
Topic: How can I display Current bandwidth usage per IP?
Replies: 7
Views: 1520

Re: How can I display Current bandwidth usage per IP?

Hi Peter, Many thanks for letting me know! Good to know it's being processed. For that other part of my question that I wrote above: One of our bigger customers for example where I use HA and LACP (so redundant firewalls connected to stacked/redundant switches) is located pretty much in the middle o...
by SECOIT GmbH
21 Aug 2018, 11:40
Forum: SG Discussions
Topic: How can I display Current bandwidth usage per IP?
Replies: 7
Views: 1520

Re: How can I display Current bandwidth usage per IP?

Hi Peter, Many thanks for the hint! What you described with PCAP is a workaround. Not as nice as the competition would do but I can work with it and to be honest - as simple as your idea is - I didn't think of it. So many thanks again! Is there also something similar that could be done with bigger e...
by SECOIT GmbH
10 Aug 2018, 17:43
Forum: SG Discussions
Topic: Exclude single IDP signature
Replies: 4
Views: 1071

Re: Exclude single IDP signature

Hi Fredrick,

Thank you for your reply!
Just to make sure I understood: In the Text box "Signature(s)" at "IDP Rule Action" screen you just put in the IDP signature ID like 23456?


Thanks,
Michael