Re: [FW-1] Checkpoint vs. Cisco VPN Client

[Don <don@FW1-NOSPAMBLACKSUN.ORG>]

> Yeah they're doing something where they insert a UDP port # in the packets
> so that the NAT device knows where to redirect the packet internally... of
> course this is proprietary to Cisco and I haven't heard of others who work
> through NAT devices!
>
> > I remember that a fellow consulting buddy of mine showing me that he
> > found Cisco's VPN client works behind a NAT whereas CP doesn't. (Of
> > course I haven't played too much with CP's client too much yet)
Neither of these statements is true.

CheckPoint has supported SR through NAT since 4.1. It became enabled
in the default configuration as of SP2. NG supports it transparently.

The client worked with NAT before this as well, however it had to be a
static NAT and various ports had to be open.

-Don

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================