Management IP on private n/w

[bahuguna_praveen]

HI All,

I have a checkpoint NG firewall and problem is that I want to manage it on my private netwrok but also i m running VPN on it so i have to set Checkpoint object IP as public otherwise VPN is not establish but doing that also mean i hve to manage it using public IP whcih i dont want is ther any work around?

Regards

[gladiatorkev]

Hi,

The VPN termination is your enforcement module and not your management server. Hence, that is where (External Interface of Your Enforcement module) you will required public IP.

Your management server can have either private Ip or Public Ip depending upon where you want to keep it (Internal / DMZ).

Hope that answers your query.

Regards

[MarioL]

From his post I'm guessing he has a stand-alone installation.

You can create another object, using the private IP and add that in the Masters tab of the modules that are being managed, to guarantee that they will use the private IP.