Yes - do a static NAT and let FW1_topo and FW1_ClientAuth through to it
If you have a problem try defining a new object with the NAT'ed address of
your MS and put it in the same rule.
Paul
--------------------------------------------------------------------------------------------

C. Paul Simons
Corporate Network Security Services
IHS Energy Group, Englewood, CO.

Main: +1 303 736 3000
Direct: +1 303 736 3451
Fax: +1 303 736 3860
Mobile: +1 303 748 5242


                                                                                       
                                                               
                    Langa Kentane                                                      
                                                               
                    <[EMAIL PROTECTED]>              To:     "Firewall-1 
Mailing List (E-mail)" <[EMAIL PROTECTED]> 
                    Sent by:                                    cc:                    
                                                               
                    [EMAIL PROTECTED]        Subject:     [FW1] 
NAT, VPN-1 and management station                                  
                    kpoint.com                                                         
                                                               
                                                                                       
                                                               
                                                                                       
                                                               
                    16-01-01 06:20                                                     
                                                               
                                                                                       
                                                               
                                                                                       
                                                               




Does the management station have to have a valid IP address to be able to
use securemote over the internet?

__________________________________________________________
Langa Kentane                  | TEL: (011) 290 3218
Security Administrator         | Cell: 082 606 1515
DISCOVERY HEALTH                    | http://www.discoveryhealth.co.za
__________________________________________________________________



================================================================================

     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================







================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to