DMZ

[jjn2007]

We would like to create a wireless guest vlan with only internet access. Our vendor suggested creating a DMZ on our R60 NGX firewall. They also suggested having the firewall do dhcp. We currently only have two interfaces and internal and external. My question is, how do I go about creating a DMZ? I am a Checkpoint newbie so please forgive me. What rule would I create for the DMZ to only have internet access?

Thanks in advance for your help.

Jeff

[gavvys]

Hi
Yes you can create a DMZ.
You have to install one more LAN card in the checkpoint server and give different series on that LAN card and that will be your DMZ gateway and after that just allow only http service from the DMZ to the internet cloud.
I hope you dont require indetail steps to do all this.
Regarding DHCP I dont think so that firewall will distribute the IPs to the clients.

If you need any help please let me know.

Regards
Ranjit

[RayPesek]

Check Point only has two zones: The Internet (external) and everything else. You will make the DMZ as an internal network and use rules to control routing between its interface and the real internal network.

Ray