Checkpoint NAT base on 1 Legal Public IP Address

[jimytri]

Hi All,

I want to implement serval services (WEB, FTP, Mail) behind the Checkpoint GW (Checkpoinnt NG with secure platform), and only 1 public IP address.

Could you guys have some sample configurations. Thanks

Jim

[Binary_01]

Will those services be on a single server or multiple servers behind your Checkpoint FW?

[kva.kva]

I think the best way is using manual static nat for different services. One rule - one service

[Lackie]

You can always use port forwarding as well.

[intehnet]

"port address translation" (static NAT based on ports requested) is the only way to go for this unless all those services are hosted on one internal IP.. ie, is the same box running mail, web, ftp?

if not.. add PAT rules manually

For example;
incoming to public ip address on port 80 gets translated to 10.0.0.2 port 80
incoming to public ip address on port 25 gets translated to 10.0.0.3 port 25
incoming to public ip address on port 69 gets translated to 10.0.1.4 port 69
etc