[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Network Object Creation
Thanks for the reply. Would there be any performance hits in a situation like this: Internet | FW ---------- T1 ----------- Remote Office ---- My Workstation | Other Servers Servers under my control We have a private T1 into our corp. office that we use for replication and remote access for maint., etc. Would there be any issues if an object that is in the corp. office is set to internal (its actually protected by our FW here. -----Original Message----- From: Aeon Hale [mailto:[email protected]] Sent: Thursday, April 12, 2001 9:37 AM To: Tim Parker; '[email protected]' Subject: Re: [FW1] Network Object Creation Tim, Your thinking is correct. Anything being protected by your firewall is set to internal and anything is being allowed/disallowed that is NOT part of your network (that you are not managing), is set to external. ----- Original Message ----- From: "Tim Parker" <[email protected]> To: "'[email protected]'" <[email protected]> Sent: Wednesday, April 11, 2001 7:18 PM Subject: [FW1] Network Object Creation > > I am studying up for my CCSA and working on making sure that our security > and firewall is set up properly. We had a couple of consultants actually set > it up. I am looking at all of our network objects at this point and am > curious about the External and Internal Options. > > If I have a server with two objects say: > > hst_SomeServer_Ext_64.x.x.x (Nat'd to 192.x.x.x) > hst_SomeServer_Int_192.x.x.x > > I understand that on the Internal object 192.x.x.x that I should set it to > Internal since it is. But should the External one also be internal (which is > what I think) since it is still protected by the firewall. > > The way I am reading the stuff I have the only time I should use External is > if I have an object that is being allowed into our network through the > firewall (external partners and such). Is that correct thinking? Thanks in > advance! > > > Tim Parker > EBWorld.com Senior Webmaster >ext.7767 > http://www.ebgames.com > > > > > ============================================================================ ==== > To unsubscribe from this mailing list, please see the instructions at > http://www.checkpoint.com/services/mailing.html > ============================================================================ ==== > > ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|