> When you are referring to a NAT'ed device in the encryption domain, does > that include Hide NAT used to provide Internet access? The NAT issue is > fairly important since almost all of the computers on my network are > configured for NAT in one way or another. Almost all of the computers on > my LAN are able to use hide NAT to access the Internet. Most of the > servers on my network are configured to use Static NAT to provide > services to the Internet. In order to have a server initiate a VPN > connection, I would have to disable static NAT on the server's > workstation object and disable hide NAT on the server's network object. Have you disabled NAT for communications between the VPN's?
When doing a VPN between two NAT'd networks, you generally want to put a rule at the top of your NAT rulebase which disables NAT between the two encryption domains. -Don ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
