RE: [FW1] securemote DNS and WINS

["Adams, Gavin" <gadams@FW1-NOSPAMpromisant.com>]

When outside of the encryption domain, who do you use for a DNS server?
It's normally the ISP's or root name server, not the internal DNS
server. In this case, SR needs to know when to use the internal DNS
server to resolve hostnames within the encryption domain. This is done
via the Split DNS that has been discussed recently, and is based on the
domain name in question. To accomplish this, changes need to be made the
management console and to the SR clients themselves.

Benefits are you can use the external DNS server for normal activity,
but when you need an internal resource, the queries are directed to the
internal DNS server. It's actually a pretty sweet setup.

HTH,

--- Gavin


-----Original Message-----
From: Idan Dolev [mailto:idan@xpert.com]
Sent: Sunday, December 10, 2000 06:38
To: Firewall_Mailing_List (E-mail)
Subject: [FW1] securemote DNS and WINS


Q.

If my DNS and Wins are internal ones, than they are already in the
encryption domain and all communication with them should be encrypted,
they
why do I need special config for them ?

Thanks
Idan


========================================================================
========
     To unsubscribe from this mailing list, please see the instructions
at
               http://www.checkpoint.com/services/mailing.html
========================================================================
========


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================