Re: [FW-1] General Question on SecuRemote and SecureClient

[Larry <larryslists@FW1-NOSPAMYAHOO.COM>]

PCs on two different home networks can have the same
IP address and successfully access the internal
network via Securemote. IP Pool NAT will assign a
unique internal address while the firewall keeps track
of the connection based on the valid IP of the client.
Because of FW-1's NAT/routing process, the firewall
will need a route to the home network directed towards
the Internet.

FW-1 4.1 SP5/SR 4.1 SP5

--- Don <don@BLACKSUN.ORG> wrote:
> > Over the weekend, I picked up for myself, a
> Linksis DSL router for home, and
> > when I was setting it up, I realized that using
> the defaults, as many users
> > would, anyone using one of these devices will be
> getting the same network,
> > and potentially the same IP address on their home
> system.
> >
> > What I am wondering about, is will I have any
> problems if two users,
> > establish a VPN connection to us, who are using
> the same internal IP Address
> > on their home system.  By not using IP Pool NAT,
> the IP Address used within
> > the corporate network, is the same address on the
> home system.  Will
> > Checkpoint correctly route the traffic to the
> correct Remote PC, or will I
> > likely run into difficulties.
> >
> > On a similar note, if I should enable IP Pool NAT
> to clear up the above
> > issue, will I need to re-deploy a USERC.C file to
> the remote PCs or is this
> > totally internal to the Firewall box.  I am asking
> this because some of our
> > VPN users are remote vendors who were reluctant to
> use the software in the
> > first place, and I don't want to inconvenience
> them further unless I have
> > to.
> IP NAT Pool will not fix this problem. You need to
> use different addresses
> on your internal network or the home networks.
>
> -don
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================


__________________________________________________
Do You Yahoo!?
Try FREE Yahoo! Mail - the world's greatest free email!
http://mail.yahoo.com/

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================