[FW-1] General Question on SecuRemote and SecureClient

[Shawn Kearley <skearley@FW1-NOSPAMNEWFOUNDLANDPOWER.COM>]

Can anyone out there tell me if I will have a problem here.

For background, We are in the early stages of deploying client VPNs, and I
do have Client VPN configured and working successfully, I have not however
configured IP Pool NAT for incoming SecuRemote connections.

Over the weekend, I picked up for myself, a Linksis DSL router for home, and
when I was setting it up, I realized that using the defaults, as many users
would, anyone using one of these devices will be getting the same network,
and potentially the same IP address on their home system.

What I am wondering about, is will I have any problems if two users,
establish a VPN connection to us, who are using the same internal IP Address
on their home system.  By not using IP Pool NAT, the IP Address used within
the corporate network, is the same address on the home system.  Will
Checkpoint correctly route the traffic to the correct Remote PC, or will I
likely run into difficulties.

On a similar note, if I should enable IP Pool NAT to clear up the above
issue, will I need to re-deploy a USERC.C file to the remote PCs or is this
totally internal to the Firewall box.  I am asking this because some of our
VPN users are remote vendors who were reluctant to use the software in the
first place, and I don't want to inconvenience them further unless I have
to.

Thanks in advance for any information you can provide

Shawn Kearley


======================================
Shawn Kearley
Infrastructure Analyst
Newfoundland Power Co. Ltd.

Phone:Fax:Email: skearley@newfoundlandpower.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================