Well, I only want to use this tricky NAT for a ssh connection to the
broken SmartCenter, so SIC does not play a role in this setup.
If I need a SmartDashboard Connection I do this inside of an ssh tunnel,
so the connection comes from localhost.
I dont want to make a SmartCenter to appear as another SmartCenter, I
want to make a Management Client to appear as another Management Client.
David DeSimone schrieb:
Markus Schmidt <[EMAIL PROTECTED]> wrote:
Should this work out? Because as you may guess, it's not.
- From what I understand, Checkpoint Smartcenter communications are
SSL protected and use identifying certificates to establish trust
(what they call "SIC"). If you are trying to use tricky NAT to
make one Smartcenter appear to have another Smartcenter's IP, you
will probably still fail, because the Smartcenter will not have the
correct certificate, so the firewall will not trust the masquerading
Smartcenter.
This email message is intended for the use of the person to whom it has
been sent, and may contain information that is confidential or legally
protected. If you are not the intended recipient or have received this
message in error, you are not authorized to copy, distribute, or
otherwise use this message or its attachments. Please notify the sender
immediately by return e-mail and permanently delete this message and any
attachments. Verio, Inc. makes no warranty that this email is error or
virus free. Thank you.
Scanned by Check Point Total Security Gateway.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
--
Markus Schmidt Tel.: ++49-351-3 18 09 27
interface systems GmbH Fax.: ++49-351-3 36 11 87
Tolkewitzer Straße 49 E-Mail: [EMAIL PROTECTED]
D-01277 Dresden
Ein Unternehmen der interface:business-Gruppe
Scanned by Check Point Total Security Gateway.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
