Re: [FW1] Proximity of Management Console to FW Gateways

["Chris 'Chipper' Chiapusio" <chipper@FW1-NOSPAMllamas.net>]

No problem, but you gotta use your head to make it work (at least if FW#1
is NATing).

My manager is behind a Nokia VRRP Cluster running NAT and I manage 9
(right now) other firewalls out on the internet.  You just need to tweak
in some custom static nat rules to make it work.


Chipper

On Tue, 14 Nov 2000, Tom Sevy wrote:

>
>Can the management station be over a hop away from the Gateways?
>
>
>
>
>
>Zone A <----> FW#1 <----> Internet
>
>               |
>               |
>               |
>              DMZ
>
>               |
>               |
>               |
>
>     FW 2 & FW 3 (vrrp Nokias)  <----> Internet
>
>               |
>               |
>               |
>      Other Zones (B, C, D)
>
>
>Is there a problem with FW 2 and FW 3 logging to a Management Station in
>Zone A?  All the logging will have to go through
>FW #1 to get logged.
>
>
>
>
>
>================================================================================
>     To unsubscribe from this mailing list, please see the instructions at
>               http://www.checkpoint.com/services/mailing.html
>================================================================================
>

------
                    Please encrypt anything important.
PGP Key: http://wwwkeys.pgp.net:11371/pks/lookup?op=get&search=0x6CFA486D



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================