If anyone is interested...

After about 3 months of trial and error, I found my answer.  Phoneboy.com mentions the 
inability of SecuRemote to access a NAT'd object (or even if the client is NAT'd) 
behind a firewall.  

The system I am trying to access is NAT'd (we are running services that need to be 
accessed outside our firewall from the Internet, and our VPN is still in test mode).  
Using FWZ encryption on my user object and SecuRemote, one particular application 
would not run (Oracle Discoverer) on this server.  After looking at the document, I 
removed the NAT'd object, disabled the rule referencing it, deleted the static route 
and tried again.  This time it worked.

Unfortunately, without our VPN rolled out, we still need to NAT the server, so my 
testing ends here.  However, I did discover that FWZ encryption through the VPN to a 
NAT'd object may not work for all services.

Hope this helps someone.

Rodney Lacroix



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to