I'm working on setting up internet access for a test environment that closely mimics our production environment. The initial thinking was to setup an available interface on the R71 SecurePlatform gateway to allow access to the internet but then it occurred to me this would create an issue with IP addressing with the lab using the same IP addressing, basically a duplicate of the production environment Active Directory and all.
I'm starting to think the best way to go would be a separate gateway all together using a UTM-1 Edge sitting on the subnet outside of the R71 gateway. I'm assuming this could also be managed by my Management Server that is currently managing the R71 SPLAT and another remote UTM-1 Edge setup with a site to site VPN. If my thinking is correct, the only way to use the R71 gateway would be a NAT device connecting to the R71 gateway to hide the duplicate IP addressing. Anyone like to share how they are securing lab environments? John ------------------------ The information contained in this email and any attachments may contain confidential, proprietary, business sensitive, privileged or controlled information. If you are not the intended recipient, any disclosure, dissemination, distribution, duplication or other unauthorized use of the information contained in this email or any attachment is strictly prohibited. Unauthorized interception of this e-mail is a violation of law. If you are not the intended recipient, please notify the sender by reply email and immediately and permanently delete this mail and any attachments and any copies of them. Technical data and/or information provided in this email or any attachment may be subject to U.S. export control laws. Export, re-export, diversion or disclosure contrary to U.S. law is prohibited. It is your responsibility to check this email and any attachments for viruses or other harmful code before opening or forwarding. ------------------------ ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
