RE: Remote Access via Checkpoint VPN

[MHawkins () TULLIB COM]

OK, maybe he's not "completely" off his nut. :-)

You're right of course.

Mike H


-----Original Message-----
From: Erick Mechler [mailto:emechler () techometer net]
Sent: Tuesday, August 17, 2004 10:15 PM
To: Hawkins, Michael
Cc: Michel.Ludolph () atosorigin com; firewall-wizards () honor icsalabs com
Subject: Re: [fw-wiz] Remote Access via Checkpoint VPN


:: You're completely off you're nut!
:: 
:: If you don't use a public IP on your firewall then I would suggest that
alot
:: of your PMTU is broken as well as your potential VPN.

I wouldn't say he's "completely" off his nut... :)  I have plenty of FWs 
with physical private IPs that have public IP blocks routed to them, 
however this will not work in a VPN deployment.

Michel, you can't terminate a CheckPoint VPN on a FW that doesn't have a 
public IP associated with its physical interface.  The VPN won't work that 
way.

Cheers - Erick
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards