Download Configuring the - Check Point Software Technologies, Ltd.

Userc.C File Parameters
•
block_conns_on_erase_passwords (true, false) — If true, the Close VPN option
will replace Erase Password in the SecureClient’s Passwords menu and the
will appear in the toolbar. Selecting Close VPN or clicking the above
button
button will result in blocking all encrypted connections — Managers.
•
enable_automatic_policy_update (true, false) — Specifies whether Automatic
Policy Update is enabled or not — Managers.
•
silent_policy_update (true, false) — If true, the client will not prompt the
user to update the policy upon client startup, even if the time specified in
automaic_policy_update_frequency has passed. The client will still attempt to
update the policy after successful key exchange — Managers.
•
PS_HA (true, false) — Use backup Policy Servers on logon failure — Managers.
•
PS_LB (true, false) — If true will randomize policy server — list so not all
clients will try to connect to the same policy server — Managers.
•
LB_default_PS (true, false) — If true, when default_ps(x.x.x.x) is set it will go
to a random Policy Server in the same site (found by examining topology) —
Managers.
•
no_policy (true, false) — Indicates disable policy state —
•
policy_expire (60) — Timeout of policy, in minutes. This property can also be
controlled in SmartDashboard — Managers.
•
retry_frequency (30) — If logged in to a Policy Server, but failed to re-logon
after half the expiry time, this parameter (in seconds) specifies the amount of
time before retrying logon. On each attempt all Policy Servers are tried —
Managers.
•
automaic_policy_update_frequency (10080) — Controls how frequently (in
seconds) SecureClient should update policy files — Managers.
•
suppress_all_balloons (true, false) - which controls all balloon messages. If
the flag is set to true, no message balloons are displays. If false, all balloons
are displayed. Note that the balloon's messages will still appear in the .tde files
and will be logged in the Status Dialog's MessageViewer.
•
sdl_browse_cert (true, false) - When set to false, the browse certificate in
"change authentication" is disabled. When set to true, the browse dialog in SDL
mode is restricted, you can only browse files, not create, change or lanuch
applications.
•
disconnect_when_in_enc_domain (true, false)- If the client is connected to a
site, and an interface appears with an IP address located within one of the
gateway's VPN domains, the client is disconnected. A message balloon explains
why.
Chapter 29
Global.
Userc.C and Product.ini Configuration Files 611