RE: [fw-wiz] Remote Access via Checkpoint VPN

MHawkins_at_TULLIB.COM
Date: 08/18/04

  • Next message: Shivdasani, Meenoo: "RE: [fw-wiz] Gauntlet 6 "adaptive proxy"" 
    To: emechler@techometer.net
Date: Tue, 17 Aug 2004 22:59:54 -0400

    OK, maybe he's not "completely" off his nut. :-)

    You're right of course.

    Mike H

    -----Original Message-----
    From: Erick Mechler [mailto:emechler@techometer.net]
    Sent: Tuesday, August 17, 2004 10:15 PM
    To: Hawkins, Michael
    Cc: Michel.Ludolph@atosorigin.com; firewall-wizards@honor.icsalabs.com
    Subject: Re: [fw-wiz] Remote Access via Checkpoint VPN

    :: You're completely off you're nut!
    ::
    :: If you don't use a public IP on your firewall then I would suggest that
    alot
    :: of your PMTU is broken as well as your potential VPN.

    I wouldn't say he's "completely" off his nut... :) I have plenty of FWs
    with physical private IPs that have public IP blocks routed to them,
    however this will not work in a VPN deployment.

    Michel, you can't terminate a CheckPoint VPN on a FW that doesn't have a
    public IP associated with its physical interface. The VPN won't work that
    way.

    Cheers - Erick
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Shivdasani, Meenoo: "RE: [fw-wiz] Gauntlet 6 "adaptive proxy""

    Relevant Pages

    • RE: Sandboxing
      ... the 3Com Embedded Firewall would be extremely useful and enabling (in ... your case) when you look at it in a VPN context. ... This security policy will accomplish quite a few things: ... During the Policy Server installation, ...
      (Focus-IDS)
    • Re: VPN Firewall for new webserver
      ... > I'm setting up a webserver at a colocation and I need to put a VPN ... You're not going to get a quality firewall for that amount, ... and D-Link makes a DI-804HV unit ... users access to the SQL server, let them do it through a VPN session. ...
      (comp.security.firewalls)
    • Re: Firewall Info/Recommendations?
      ... I would seriously consider an air-gap solution. ... Let me outline a few features that no other firewall can touch. ... Provide secure access without a VPN from any web browser (this greatly ... > manageable without much higher-level support if you want things like ...
      (comp.security.firewalls)
    • Re: [fw-wiz] Integrated IDS/IPS/Firewall (Cisco ASA and Juniper ISG)
      ... complexity and architectural inelegance of having 3-5 gateway security ... VPN) convinced me to eventually champion a migration to Symantec's SGS ... Nice balance of "default deny" at the firewall, ...
      (Firewall-Wizards)
    • Re: two winxp home machines, varied results
      ... >The only firewall I have on my machine *aside* from the Cisco VPN ... Please don't change "restrictAnonymoussam", only ... >Here is the IPCONFIG and BROWSTAT listings for each machine. ...
      (microsoft.public.windowsxp.network_web)