🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #445

Re: Sonicwall --> Checkpoint questions

#445
From: wailakid
Date: Fri, 15 Dec 2000 04:13
55 lines
3284 bytes
H Robert -- if you mean VPN when you say 'see each other' AND if both
cable connected SOHOs have dynamic DHCP WAN IP addresses, you can't do
any VPN at all between the firewalls.

Why -- Checkpoints don't support box-to-box VPN unless both sides are
static, and you can't do VPN with any technology if both firewall public
IPs are dynamic.  So the two SOHOs are capable of doing VPN with each
other, but can't, due to the lack of static IPs.



In article <Vs3bPtRZAHA.396@bassett.us.checkpoint.com>,
  "Secure-1.com" <jshelest@secure-1.com> wrote:
> you have to create 2 physical tunnels, a mesh between the sites on you
> TELE2.
>
> --
> Secure-1.com
> www.secure-1.com
>
> "Robert Holmes" <valnar@yahooxxx.com> wrote in message
> news:4s1f3to7espt9skgoijtebaklh29aqe62c@4ax.com...
> > I have a Sonicwall Tele2 up and running on a couple sites with a cable
> > modem.  Both connect via VPN to our Corporate Checkpoint Firewall1
> > server for connectivity back to the Corporate LAN.  All that works
> > well.
> >
> > Is it possible to setup a rule on the Checkpoint server to allow the
> > two Sonicwall sites to see each other?  Right now their private IP
> > LANS are 10.240.1.0 /24 and 10.240.2.0 /24.  Both Sonicwall LAN's can
> > see all of our Corporate 192.168.0.0 /16 network but they can't see
> > each other.  I think it's because neither one get to the main
> > corporate router.  I guess I need a method of the Checkpoint (NT)
> > server do to internal routing when both networks terminate at the
> > server and don't go any farther.
> >
> > My second question is:
> > Is there a way to manage the Sonicwall setups from their Public IP WAN
> > address WITHOUT using that Sonicwall VPN client?  I just want access
> > to the Administrative web page on the Sonicwall but can only get to it
> > via the internal LAN IP.  Even when I completely take down all
> > firewall settings on the Sonicwall, it won't work.
> >
> > Robert
> >
> >
> > -----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
> > http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
> > -----==  Over 80,000 Newsgroups - 16 Different Servers! =-----
>
>


Sent via Deja.com
http://www.deja.com/
Technical Details
Message-ID: <91c5p0$2g1$1@nnrp1.deja.com>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!newsfeed.mesh.ad.jp!portc01.blue.aol.com!newsfeed.mathworks.com!news.maxwell.syr.edu!nntp2.deja.com!nnrp1.deja.com!not-for-mail
References: <4s1f3to7espt9skgoijtebaklh29aqe62c@4ax.com> <Vs3bPtRZAHA.396@bassett.us.checkpoint.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,e5e5c8e29cf48f91
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,e5e5c8e29cf48f91
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2000-12-14 20:20:07 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!newsfeed.mesh.ad.jp!portc01.blue.aol.com!newsfeed.mathworks.com!news.maxwell.syr.edu!nntp2.deja.com!nnrp1.deja.com!not-for-mail
From: wailakid@my-deja.com
Newsgroups: comp.security.firewalls,cp.products.firewall-1
Subject: Re: Sonicwall --> Checkpoint questions
Date: Fri, 15 Dec 2000 04:13:24 GMT
Organization: Deja.com
Lines: 55
Message-ID: <91c5p0$2g1$1@nnrp1.deja.com>
References: <4s1f3to7espt9skgoijtebaklh29aqe62c@4ax.com> <Vs3bPtRZAHA.396@bassett.us.checkpoint.com>
NNTP-Posting-Host: 209.239.164.77
X-Article-Creation-Date: Fri Dec 15 04:13:24 2000 GMT
X-Http-User-Agent: Mozilla/4.61 (Macintosh; U; PPC)
X-Http-Proxy: 1.0 x58.deja.com:80 (Squid/1.1.22) for client 209.239.164.77
X-MyDeja-Info: XMYDJUIDwailakid