Re: [FW-1] VPN and NAT will not work at the same time with NG FP1

[Don <don@FW1-NOSPAMBLACKSUN.ORG>]

> When you are referring to a NAT'ed device in the encryption domain, does
> that include Hide NAT used to provide Internet access? The NAT issue is
> fairly important since almost all of the computers on my network are
> configured for NAT in one way or another. Almost all of the computers on
> my LAN are able to use hide NAT to access the Internet. Most of the
> servers on my network are configured to use Static NAT to provide
> services to the Internet. In order to have a server initiate a VPN
> connection, I would have to disable static NAT on the server's
> workstation object and disable hide NAT on the server's network object.
Have you disabled NAT for communications between the VPN's?

When doing a VPN between two NAT'd networks, you generally want to put a
rule at the top of your NAT rulebase which disables NAT between the two
encryption domains.

-Don

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================