Re: [FW1] Network Object Creation

["Aeon Hale" <checkpoint_guru@FW1-NOSPAMhotmail.com>]

Tim,

Your thinking is correct.  Anything being protected by your firewall is set
to internal and anything is being allowed/disallowed that is NOT part of
your network (that you are not managing), is set to external.


----- Original Message -----
From: "Tim Parker" <hostmaster@ebworld.com>
To: "'fw-1-mailinglist@lists.us.checkpoint.com'"
<fw-1-mailinglist@beethoven.us.checkpoint.com>
Sent: Wednesday, April 11, 2001 7:18 PM
Subject: [FW1] Network Object Creation


>
> I am studying up for my CCSA and working on making sure that our security
> and firewall is set up properly. We had a couple of consultants actually
set
> it up. I am looking at all of our network objects at this point and am
> curious about the External and Internal Options.
>
> If I have a server with two objects say:
>
> hst_SomeServer_Ext_64.x.x.x  (Nat'd to 192.x.x.x)
> hst_SomeServer_Int_192.x.x.x
>
> I understand that on the Internal object 192.x.x.x that I should set it to
> Internal since it is. But should the External one also be internal (which
is
> what I think) since it is still protected by the firewall.
>
> The way I am reading the stuff I have the only time I should use External
is
> if I have an object that is being allowed into our network through the
> firewall (external partners and such). Is that correct thinking? Thanks in
> advance!
>
>
> Tim Parker
> EBWorld.com Senior Webmaster
>ext.7767
> http://www.ebgames.com
>
>
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>
>


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================