[sebastan_bach]

hi all i have confiured hide nat on the network object to hide behind the gateway.

i have policies and all.

i have also put put a policy to permit from external network to internal network.

now i am trying to access the internal host on it;s actual ip address and it;s working.

is natting uni-directional in checkpoint.

cause in cisco or netscreen when we configure dynamic nat for internal hosts then from external networks u cannot reach the internal hosts on their actual addresses even though a policy permit it.

is this the way checkpoint dynamic natting works.

can someone pls confirm on this.

regards

sebastan