First of all you should have a central license, this is better because even
if you change the ip address of the modules or you change the module there
is no need to modify your license, you just detach and attach to another
one.
Your firewall should have the external ip address for your vpn's.
Regards,
Lino
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Flores
Portillo, Israel
Sent: Viernes, 30 de Junio de 2006 09:05 a.m.
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] External IP address as the IP of the object
Hi Gurus,
Does somebody know what problems would I have if the IP Address
of my firewall object is not its IP address from the external interface? I
have read some place that administrator should configure the external IP
address as the IP for the firewall object, but I don't why.
I am making a fresh installation but I am planning an IP address
change for the external interfaces in two months therefore I will need to
relicense (somebody knows how many times can I do this?). Maybe I could
license to the internal IP address to avoid the license again later.
I have a cluster with two firewalls, and another possibility is
to define the firewall objects with an internal IP address (the license
would attached to this one) and define the cluster object with the external
IP address, how that sounds? Will I have problems later?
Anyone could give an advice?
Israel Flores Portillo
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
