Fwd: Re: [FW1] Quick MEP question

["Richard Turner" <rit@FW1-NOSPAMfirstoption.com>]

The firewalls are separately licensed modules managed by the same
management module. Internal meaning managed by your management
server. So its a bit more than just ticking the "internal" button as
the gui will attempt to install your security policies on all
internal firewalls. You start by saying that you want to create an
MEP VPN between two firewalls, but MEP is a way of providing
SecuRemote backup entry points. The layout for this is 2 fw modules
common management via a distributed setup and not 2 independant
internet gateways. Is this what you want? If it is then, I think that
you are going to need something along the lines of a
high-availability license, a management license and 2 firewall module
licenses. 

regards

Richard Turner


>-------- ORIGINAL MESSAGE BELOW --------
>This may sound like a dumb question, but I am trying to set up a MEP VPN
>between 2 firewalls on separate networks, separated by a dedicated link. I
>was going through the instructions from the Checkpoint website and it
>mentions creating a firewall object on firewall A for firewall B.  It looks
>as if the network object for Firewall B has to be set up as an "internal"
>gateway for this to work.....My question is: doesn't my Firewall have to be
>licensed to have more than 1 internal gateway object?  In other words, will
>I have to purchase additional licenses for Firewall A and Firewall B in
>order to create the internal gateway objects?  Or, am I completely wrong by
>assuming that the firewall objects have to be created as internal?
>
>Thanks for any help!
>
>R. Jones


______________________________________________________________________

First Option's outgoing email policy is at 
http://www.firstoption.com/emailpolicy.html, but a short summary is :-

- all email/attachments are confidential; do not use, circulate or release 
without our consent

- email is not authorised unless it is on First Option business

- email is not binding unless it is from an authorised person
and is signed with a digital certificate

First Option Ltd. - Switchboard +44 (0) 1962 738200
Signal House, Jacklyns Road, Alresford, Hants, SO24 9JJ, United Kingdom
_______________________________________________________________________


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================