CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Web Security > SSL Network Extender
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-02-10
Junior Member
 
Join Date: 2008-02-08
Posts: 1
Rep Power: 0
ExploreMN has an average reputation (10+)
Default Extender works internally, but not externally...help!

Hi,
I'm brand new to the whole Connectra thing and for some reason the extender will work if I connect to the box internally, but when I connect from the outside world it is unable to create the SSL extender. The logs show nothing...no errors or reasons for the problem.

The network layout is pretty simple.
Business cable like with static/public IP addresses
Netgear Firewall with a WAN address mapped to the public IP address and the firewall's LAN address is a static address that is the default gateway for the network devices (192.168.200.250).
The Connectra box has one network card in it that is mapped to a static LAN IP (192.168.200.225).
The Connectra IP is listed in the firewall's DMZ (I also tried it behind the firewall with port 443 and 444 mapped to the box...no difference in what happens)

I'm stumped as to what is the problem. I can attach and log in from the outside world, and can view files through the portal on the servers. However, when I try to connect the extender it fails. From an internal connection the extender loads just fine.

Any ideas???
Reply With Quote
  #2 (permalink)  
Old 2008-02-11
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,670
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Extender works internally, but not externally...help!

There is an option in the SNX setup to tell it what external IP addresses it should use. Without this the app will try to connect to the internal IP address of 192.168.200.225.
Reply With Quote
  #3 (permalink)  
Old 2008-02-14
Senior Member
 
Join Date: 2007-09-17
Location: Singapore
Posts: 161
Rep Power: 2
chuachongchee has an average reputation (10+)
Default Re: Extender works internally, but not externally...help!

Quote:
Originally Posted by ExploreMN View Post
Hi,
I'm brand new to the whole Connectra thing and for some reason the extender will work if I connect to the box internally, but when I connect from the outside world it is unable to create the SSL extender. The logs show nothing...no errors or reasons for the problem.

The network layout is pretty simple.
Business cable like with static/public IP addresses
Netgear Firewall with a WAN address mapped to the public IP address and the firewall's LAN address is a static address that is the default gateway for the network devices (192.168.200.250).
The Connectra box has one network card in it that is mapped to a static LAN IP (192.168.200.225).
The Connectra IP is listed in the firewall's DMZ (I also tried it behind the firewall with port 443 and 444 mapped to the box...no difference in what happens)

I'm stumped as to what is the problem. I can attach and log in from the outside world, and can view files through the portal on the servers. However, when I try to connect the extender it fails. From an internal connection the extender loads just fine.

Any ideas???
Have you setup ur VPN Domain correctly??? For SNX, the vpn "routing" works solely("dumbly") on the said vpn domain..
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 18:19.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0