Re: [FW-1] IP Address for FW Checkpoint Server

[Nico De Ranter <nico@FW1-NOSPAMSONYCOM.COM>]

I think your vendor means to use a private IP Address for the ip-address
the software is licensed to. It is in general a good idea to use private IP
addresses on your internal network (and use NAT on the firewall for outgoing
traffic). If you ever decide to change ISP or have to change external ip-addresses
for some reason, you will not have to change
these addresses and your firewall license will remain valid.

(note: if the firewall runs on Sun (Sparc) then the license is linked to
the hostid not to the ip-address anyway)

Nico

On Tue, Feb 05, 2002 at 11:21:26PM +1100, BY wrote:
> Dear all,
>
> My vendor recommends me to use private class B IP Address on Firewall
> Checkpoint which is not convincing me at this stage because of my
> following belief:-
>
> 1. Firewall (as the primary interface with outside world for my internal
> network), it needs to use registered Class C IP address.
>
> 2. If possible it is good setup to have 3 NIC on the Firewall. 1 NIC IP
> to interface directly with the public network with configured gateway
> address ; 1 NIC IP as DMZ IP without configuring gateway IP address ; 1
> NIC IP to talk to internal network without configuring gateway IP
> address.
>
> Don't you think?
>
> BY
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
---------------------------------------------------------
 "It has been said that there are only two businesses that
  refer to customers as users: illegal drug trade and
               the computer industry."
---------------------------------------------------------
Nico De Ranter
Sony Service Center (SDCE/VPE-B)
Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne)
1130 Brussel (Bruxelles), Belgium, Europe, Earth
Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86
e-mail: nico.deranter@sonycom.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================