Re: ipsec to block ip range

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 11/23/05 

Date: Wed, 23 Nov 2005 10:50:26 -0700

hmmm save for the initial post of encouragement
I really did no do anything.
For your apparent case you could also have left the
default dynamic rule off and not fooled with any
Kerberos rules - just one rule naming the IP range,
with garbage preshared key, and block action. 

-- 
Roger
<google@ratemyband.co.uk> wrote in message 
news:1132693786.607374.12920@g47g2000cwa.googlegroups.com...
> Phew!
> wasn't too bad after all.
> I simply added the new rule to the currently activated security policy
> which was already very well locked down.
>
> Thanks for your help, much appreciated
>