Quoting brian dell <[EMAIL PROTECTED]>:
> is this true that (in FP2)
> "Automatic NAT is performed on the client side while
> Manual NAT is performed on the server side"
from phoneboy:
In NG, nat happens on the client side if the appropriate property is enabled and
automatic nat rules are in use. This means a static route isn't necessary.
Proxy-arps can also be handled by FireWall-1 automatically. Both properties to
enable these features are in the Global Properties, nat frame. If you prefer
manual nat rules, an objects.C property called 'nat_dst_client_side_manual' is
supposed to allow client-side nat with manual rules. In dbedit, enter the
following commands:
modify properties firewall_properties nat_dst_client_side_manual true
update properties firewall_properties
Reload the security policy.
Check Point did not make a GUI for this prior to FP3 because it doesn't work
well for dual nat situations (changing both source and destination IP). In NG
FP3, it works correctly and there is a GUI entry for this property in the same
place as the others.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
