Heh...

I was just on with HP support for our Check Point and they mentioned
off-hand something about the only way that Back Connections with is with
office mode.

I just tried to ping an office mode machine, with the office mode client's
security policy disabled, and it worked just fine.  Once I re-enabled the
client security policy I could only access it per the security policy rules.

If you setup office mode, you may want to setup a couple NAT rules so it
doesn't NAT traffic between your internal network and the office mode
network.

Good luck!

Geoff

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of Neil Kemp
Sent: Wednesday, May 05, 2004 6:44 AM
To: [EMAIL PROTECTED]
Subject: [FW-1] SecureClient and Back Connections


Good afternoon. I am working on site at the moment configuring SecureClient
for a customer.

It is all working, no problems. What the customer would like to do is to
allow connections from within the encryption domain out to the connected
SecureClients for support matters, remote control etc.

I have enabled back connections form within the global policy. What else do
I need to perform in order to get this working ? A ping will do for the time
being.

Any help would be appreciated.

Thanks.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to