Firewall-1

[FW-1] External IP address as the IP of the object

Subject: [FW-1] External IP address as the IP of the object
From: "Flores Portillo, Israel" <israel.flores.portillo AT GEDAS.COM DOT MX>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Fri, 30 Jun 2006 09:05:03 -0500
Hi Gurus,

 

            Does somebody know what problems would I have if the IP Address
of my firewall object is not its IP address from the external interface? I
have read some place that administrator should configure the external IP
address as the IP for the firewall object, but I don't why.

 

            I am making a fresh installation but I am planning an IP address
change for the external interfaces in two months therefore I will need to
relicense (somebody knows how many times can I do this?). Maybe I could
license to the internal IP address to avoid the license again later.

 

            I have a cluster with two firewalls, and another possibility is
to define the firewall objects with an internal IP address (the license
would attached to this one) and define the cluster object with the external
IP address, how that sounds? Will I have problems later?

 

Anyone could give an advice?  

  

Israel Flores Portillo

 


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>