[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewall-1
Subject:    Re: [FW-1] AD Domain Password change va SecuRemote
From:       Sergio Alvarez <seralvar () GMAIL ! COM>
Date:       2007-03-29 18:53:49
Message-ID: caf939ad0703291153p538ae92cub6b77cb760894a25 () mail ! gmail ! com
[Download RAW message or body]

Thanks a lot Robby!!

Your confirmation that using SDL does work for the "Change Password" request
is all what I needed.

BTW for everybody else to know, I checked with a Check Point pre-sales guy
and you in fact need Secure Client licenses in order to use SDL (at least
according with the license agreement).

Thanks a lot also to everybody else that wrote about this issue, it was all
helpful info.

Regards

On 3/29/07, Rufener [US], Robby E. <Robert.Rufener@sperry.ngc.com> wrote:
>
> We used SDL for about a year where I work with pretty good success. The
> "Change your password" requests did come through while using SDL. I
> believe you are correct that the password change operation for Windows
> domains only happens during the initial login.
>
> We do not have very many people who only work from home, most of ours
> use SecureClient on travel. Because of this, our user community
> complained because every day they were in the office they had to cancel
> the SDL login, so we moved away from using SDL Regarding the licensing,
> we do have SecureClient licenses, rather than just SecuRemote, so I am
> not sure if you have to have it for SDL to work.
>
> Thank You,
> Robert Rufener
> Network Engineer
> Northrop Grumman/Sperry Marine
>
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM] On Behalf Of Sergio
> Alvarez
> Sent: Thursday, 29 March 2007 3:22 p.m.
> To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM
> Subject: Re: [FW-1] AD Domain Password change va SecuRemote
>
> Thanks Romey,
>
> I don't really have much knowledge related with Microsoft stuff or
> Windows
> Domains, so do you know how exactly does that Kerberos change password
> works?
>
> I'm thinking first of all that if this is something the DC initiates to
> the
> users and these are SecuRemote users going through an IP Pool NAT, most
> likely it will not work.
>
> On any case my questions about SDL are because I believe this whole
> password
> change thing happens only during domain logon, do you know if I'm right
> or
> not?
>
> Thanks again.
>
> Regards
>
>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV@amadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>



-- 
Sergio Alvarez
(506)8301342

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================
[prev in list] [next in list] [prev in thread] [next in thread]