RE: [FW1] Firewall and VPN module.

[hacker@vudu.net]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set. Some ]
    [ characters may be displayed incorrectly. ]


Roger,

There are several issues which complicate VPN's that you
have not answered. Who are you going to be encrypting
traffic to? 1) End-users, 2) small satellite offices, 3)
partners with their own firewalls?
The SecuRemote client will work OK for 1, probably be OK for
2, and will likely not work for 3. Of course specific
configurations may vary.
Generally:
The SecuRemote client can't be NATted.
The SecuRemote client can be behind another Firewall with
specific rules.
VPN-1 to VPN-1, network to network, connections are easy.
VPN-1 to anyone else, network to network, is bleeding edge.

If I'm wrong on this, someone please correct me.

{%}{%}{%}{%}{%}{%}{%}{%}{%}{%}{%}{%}{%}{%}{%}{%}{%}{%}{%}{%}
Eric Hacker, MCSE, CCSE                      hacker@vudu.net

Hacker is my real name. Please, no flames, no props...
Just deal with it.

roger.mallofre@itece.es
Sent: Friday, November 05, 1999 6:56 AM
To: fw-1-mailinglist@lists.us.checkpoint.com
Subject: [FW1] Firewall and VPN module.

We have a ckeckpoint firewall without a module VPN. Now we
want to aplly
encription with some internet connections.

- What is the best solution in this case?
- The next one is a good solution:

     VPN-1 Gateway in our center + VPN-1 SecureClient in the
remote internet
connection.

Thanks.

Best Regards.



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================