You have mentioned the word "client" ... if it is actually user with a "Checkpoint SecureClient" software loaded on the PC? or just a user inside the encryption domain..... then which encryption domain are we talking about? ....the corporate office (let call it site A) ....or the remote office (let call it Site B) That woul help us undetanding your setup and possibly your problem. Thanks
FITZ MAILING <[EMAIL PROTECTED]> wrote: Hi guys, I have following scenario: A headquarter with a Management Server and a Firewall Modul to the Internet. A remote office with another Firewall Modul, that is managed by the Management Server at the headquarter. The VPN-Domains are manual defined and includes only the internal networks at both sides. I use VPN-Communites and the traffic between the internal networks is encrypted. I have a Client, that is part of the Encryption Domain at the headquarter and I want, that this client can connect to the external Interface (Internet) of the Firewall Modul at the remote office without using the VPN tunnel. Therefore I do NAT at the Firewall Modul at the headquarter. Because the external Interface of the Firewall Modul at the remote location is not part of the manual defined VPN-Domain this should work. But unfortunately the Firewall Module at the headquarter routes this traffic through the tunnel. It seems that all interface of the modul are automaic part of the encrpytion domain... The only solution is to exclude this client from the manual encryption domain of the headquarter, but this is no solution. Has anyone a solution for me, it drives me crazy ;-) best regards fitz ___________________________________________________________ Gesendet von Yahoo! Mail - Jetzt mit 1GB Speicher kostenlos - Hier anmelden: http://mail.yahoo.de ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= --------------------------------- Yahoo! FareChase - Search multiple travel sites in one click. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
