Thanks for the reply. Would there be any performance hits in a situation
like this:
Internet
|
FW ---------- T1 ----------- Remote Office ---- My Workstation
| Other Servers
Servers under my control
We have a private T1 into our corp. office that we use for replication and
remote access for maint., etc. Would there be any issues if an object that
is in the corp. office is set to internal (its actually protected by our FW
here.
-----Original Message-----
From: Aeon Hale [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 12, 2001 9:37 AM
To: Tim Parker; '[EMAIL PROTECTED]'
Subject: Re: [FW1] Network Object Creation
Tim,
Your thinking is correct. Anything being protected by your firewall is set
to internal and anything is being allowed/disallowed that is NOT part of
your network (that you are not managing), is set to external.
----- Original Message -----
From: "Tim Parker" <[EMAIL PROTECTED]>
To: "'[EMAIL PROTECTED]'"
<[EMAIL PROTECTED]>
Sent: Wednesday, April 11, 2001 7:18 PM
Subject: [FW1] Network Object Creation
>
> I am studying up for my CCSA and working on making sure that our security
> and firewall is set up properly. We had a couple of consultants actually
set
> it up. I am looking at all of our network objects at this point and am
> curious about the External and Internal Options.
>
> If I have a server with two objects say:
>
> hst_SomeServer_Ext_64.x.x.x (Nat'd to 192.x.x.x)
> hst_SomeServer_Int_192.x.x.x
>
> I understand that on the Internal object 192.x.x.x that I should set it to
> Internal since it is. But should the External one also be internal (which
is
> what I think) since it is still protected by the firewall.
>
> The way I am reading the stuff I have the only time I should use External
is
> if I have an object that is being allowed into our network through the
> firewall (external partners and such). Is that correct thinking? Thanks in
> advance!
>
>
> Tim Parker
> EBWorld.com Senior Webmaster
> 610-430-8100 ext.7767
> http://www.ebgames.com
>
>
>
>
>
============================================================================
====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
