[FW1] Remote Subnet access through FW-1 4.0

["Claussen, Ken" <kclaussen@FW1-NOSPAMrpaworldwide.com>]

I am having trouble exposing a host on a remote subnet to the outside world.
We have recently added a second subnet needing to be accessed by our
Checkpoint 4.0 firewall. So far we have not been able to make the objects
exportable successfully. The subnet (192.168.13.x) is across a frame relay
(12 channels) connection and an intermediate private (192.168.14.x) network.
Network traffic behind the firewall works correctly, however the objects we
have defined in the firewall cannot be reached from the outside using there
NATed address. We have a rule in the firewall that prohibits all traffic
destined for the firewall itself. We have added the arp entries, and the log
shows traffic being accepted for the connection, however the remot
connection never receives a response. My thought was since it is a remot
subnet we will have to insert the rule before the rule which drops all
traffic destined for the firewall itself. I have tried Checkpoint's site,
but we could not find our username and password and the "Public" info did
not contain this level of info. Has anyone else tried to make objects on
remote subnets exportable? We want to route mail and web traffic over there,
but so far it has not worked. All suggestions would be appreciated.


Ken Claussen MCSE CCNA CCA


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================