Hi Greg,
thank for those informations.But i suppose, this check up will introduce a
big latency in data delivery and will need ressources Are they some
documents which talk about that (i couldn't unfortunately get the URL that
you sent because it is password protected)?
Does someone know the other products which challenge FW-1 in filtering XML
data sent on SOAP protocol. I would be happy to have a brief comparison on
how they work.

Thanks in advance,

Evariste
-----Message d'origine-----
De : securitbtopenworld.com [mailto:securitbtopenworld.com]
Envoyé : jeudi 3 octobre 2002 12:28
À : AKOUEGNON Evariste (IFATEC); issforumiss.net
Cc : securitbtopenworld.com; cyberinfidelhotmail.com; THAZARD Patrick
(IFATEC)
Objet : RE: SOAP (Simple Object Access Protocol)

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any
problems!
----------------------------------------------------------------------------

Absolutely!

Simple Object Access Protocol (SOAP), a standard for application data
sharing over the Internet using HTTP, is supported. SOAP relies on XML to
encode the information and then adds the necessary HTTP headers to send it.
Using URI resources, FireWall-1 is able to parse SOAP version 1.1 traffic
and validate its integrity according to a user defined scheme. SOAP
functionality is available via a new tab in the URI resource window.

The functionality is documented in the Check Point Documentation from their
website at :
http://www.checkpoint.com/support/downloads/docs/firewall1/ng/fp3/FireWall-1
_NG_FP3.pdf
which you may need a password for, however there is a web page or two:

http://www.checkpoint.com/products/fp3/webservices_overview.html
http://www.checkpoint.com/products/fp3/webservices_application_intelligence.
html
http://www.checkpoint.com/products/fp3/webservices_defined.html

I hope that this helps.

Yours Kindly
Gregor Munro
SecurIT Limited

> from: "AKOUEGNON Evariste (IFATEC)" <evakouegIFATEC.fr>
> date: Thu, 03 Oct 2002 09:27:09
> to: issforumiss.net
> cc: securitbtopenworld.com, cyberinfidelhotmail.com,
patrick.thazardifatec.fr
> subject: RE: SOAP (Simple Object Access Protocol)
>
> Hi Greg,
> does it mean, that FW-1 is able to filter XML data sent on SOAP protocol
> (just like an XML firewall)? I would be happy to have more informations
> about this (URL, documents ..) which explains how it works.
>
> Cheers,
>
> Evariste
>
> -----Message d'origine-----
> De : securitbtopenworld.com [mailto:securitbtopenworld.com]
> Envoyé : vendredi 13 septembre 2002 23:36
> À : cyberinfidelhotmail.com; issforumiss.net
> Objet : Re: SOAP (Simple Object Access Protocol)
>
>
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
to
> majordomoiss.net Contact issforum-owneriss.net for help with any
> problems!
>
----------------------------------------------------------------------------
>
> Hi Marcus
>
> Check Point FireWall-1 NG FP3 has SOAP and XML support!
>
> Cheers
> Greg
>
> > from: Marcus Nelson <cyberinfidelhotmail.com>
> > date: Fri, 13 Sep 2002 15:50:35
> > to: issforumiss.net
> > subject: Re: SOAP (Simple Object Access Protocol)
> >
> > I was wondering if anyone has been looking at SOAP a potential threat.
> >From my understanding, it allows things like RPC calls between systems
> using HTTP (among other things). It seems to be that this is going to be
a
> real problem for firewalls.
> >
> > I'm looking at creating some basic detection filters, but I would like
to
> know if ISS is planning to build any events for SOAP.
> >
> > Thanks
>

_______________________________________________
ISSforum mailing list
ISSforumiss.net

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]