[FW-1] Accessing the drive share on a Securemote client

[Steve R <steve.rielly@FW1-NOSPAMEXTRANET.CO.NZ>]

Hi All,

I have a requirement to be able to access a drive share of a Securemote user who is behind a
DSL NAT device( which does not have an IPSec engine, so cannot be the decrypt point ).

I would have a rule which is user@any to local_domain any client encrypt, for the user to
connect into the network.

But could you have to go back in the other direction?

        Source: local_domain
        Destination: Home_Net ( which would be the IP of the Securemote client )
        Service: Any
        Action: Encrypt ( or would this be client encrypt? )

I have defined an object which is the DSL unit, and have this as the gateway to home_net,
which would be set to proxy UDP/500 and protocol50 through to the Securemote client, would
this work. I suppose it comes down to the question can the Securemote client not be the end
initiating the connection?

Cheers,
        SteveR


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================