Routable address for management

[PreacherMan]

Hi!

I'm currently planning an Checkpoint installation with two vpn-able nodes using cluster-xl and a seperate management server. Is there any need for the management-server to have an non-RFC1918 address such as authentication, policy-server, pki or so?

[BarryStiefel]

Originally Posted by PreacherMan

Hi!

I'm currently planning an Checkpoint installation with two vpn-able nodes using cluster-xl and a seperate management server. Is there any need for the management-server to have an non-RFC1918 address such as authentication, policy-server, pki or so?

Authentication (User, Client, Session) is all done through the security gateway, as is the SecureClient Policy Server. If someone outside your network needs to contact your Certificate Authority (in your SmartCenter Server) then obviously it will need to have a public IP address.

I don't have a definitive answer, but I suspect most of the time you can get away with your SSC not having a public IP address.