I am working with someone which has an IPSEC VPN Client (installed on a PC) and is 
trying to get through their firewall (Checkpoint/Nokia) to our VPN gateway.  They said 
they have reviewed the Nokia/Checkpoint documentation  and have concluded that it 
can't be done. I am wondering if this is actually true. I have very little experience 
with Checkpoint firewalls. I am asking if this can actually be done, and if anyone has 
experience in passing IPSEC, as a client, through a Checkpoint/Nokia firewall? If 
anyone has any insight to this, your response would be GREATLY appreciated. (We are 
sort of in a time crunch. I know, isn't everybody?!)

Information from our VPN developer regarding passing IPSEC through a generic firewall. 
They had no info on Checkpoint specifically. I will be researching Checkpoint's site.:

1) I have been told that they need to statically map the VPN client addresses (the 
exposed addresses) as opposed to dynamically assigning them.
2) Open udp500, tcp389, tcp709 and protocols 50&51. Our VPN developer claims that 
these services need to be open in both directions (inbound and outbound) on their 
firewall. It's my understanding that they just need to be open in one direction 
(outbound, from them to us). 

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to