NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] [email protected]



Hi Usui,

Do you have a router between the internet and your firewall that is doing
NAT to your 10.1.1.1 address of the firewall.

Also is the firewall module on the same system as your management module.

Your licence's should be created with your firewall's external interface,
this IP address is in the $FWDIR/conf/external.if file, otherwise secure
remote will not work.

Also 10.1.1.1 and 192.168.1.1 are not internet routable addresses, you will
need to find out the routable IP address of your firewall/mgt station.

cheers

Leon

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]]On Behalf Of Seigo
Usui
Sent: 28 August 2002 10:11
To: [email protected]
Subject: [FW-1] [email protected]


Hi all,

I have a question regarding SecuRemote.
The version I am using is FireWall-1 4.1.
(both of VPN-1/FireWall-1 and SecuRemote)

Here is our architecture.

   Internet
      |
      |
      |
      |(10.1.1.1=external interface)
   FireWall-1----------------------------------DMZ
      |(192.168.1.1=DMZ interface)
      |
      |
      |
    LocalNetwork(192.168.1.0/24)

I created my management and firewall object with an IP address of
192.168.1.1.
Also,The licensed IP address is 192.168.1.1.
(both of VPN-1/FireWall and Securemote license)

Generally speaking, when securemote client from internet registers a site,
I suppose he needs to add an IP address of 192.168.1.1 by a configuration
screen of SecuRemote.
Because I am thinking SecureRemote needs to connect to the IP address of
Management
Console or FireWall module ( if a SecuRemote license is installed on the
firewall
module).
But, when SecuRemote Client tries to add a site, is it possible to add an IP
address
(for example, in this case, it is  10.1.1.1)which is not a Management
console ?

Any advice would be greatly appreciated !

Usui

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.