View Single Post
  #2 (permalink)  
Old 2006-03-02
ddarby1 ddarby1 is offline
Member
 
Join Date: 2006-01-09
Posts: 72
Rep Power: 3
ddarby1 has an average reputation (10+)
Default Re: Newbie help with VPN-1

rasoftware,

you need to read up a bit on Check Point and Firewalls.

Most firewalls, unlike routers are paranoid by default, though some will allow inbound to outbound by default, but certainly not the reverse.

This means that there is an implicit deny at the bottom of the rule set (or access-list, etc.). If you have no rules, no traffic is allowed, except in CheckPoint's case, hidden 'Implied Rules' which are required to manage the firewall form the Managment Server.

Try starting by adding a Security Rule, which has Source; Any, Destination; Any, Action; Accept.

Depending on how your NAT rule is setup your client behind the Firewall should then be able to access the Internet.

If this does not work, post back here, but do try to find out this information for yourself.


In answer to your question, no you do not need to enable routing and remote access on the 2003 box.
Reply With Quote