Creating a VPN to Checkpoint

Thread View: comp.security.firewalls

4 messages

[T] Back to Threads [V] Tree View [G] Group Articles

4 total messages Started by Andrew Dickinson Tue, 13 Aug 2002 19:34

#406

Author: Andrew Dickinson
Date: Tue, 13 Aug 2002 19:34

24 lines
2200 bytes

The company I work for has some remote satellite offices that, as time
goes on, need increasing connectivity to our central/corporate office.
Currently we are using a Checkpoint VPN-1 and Firewall-1 4.1. Clients
are all using Windows 9x or NT/Win2K and connecting with Securemote.
In some of our remote offices we are now placing broadband
connections, like ADSL, simply because of cost effectivess of these
links. What I would like to be able to do though is have a
appliance/router (like a Cisco 806 or possibly one of the Linksys
units) that is capable of creating a IPSEC VPN tunnel from that remote
office back to our Checkpoint Firewall at our central office.

I know of other people/businesses that have used the Cisco 806 router
to connect to a Nortel Nertworks Contivity appliance so I am wondering
whether the same thing can be done to Checkpoint Firewall-1. Possibly
it cannot as I am not that familiar yet with this product.

If anyone can offer any suggestions, directions or configuration
information I would appreciate the feedback. I would especially
appreciate hearing from anyone that may of ventured down this path
already (especially with a Cisco 806 or Linksys router).

Thanks in advance for your help.

-Andrew

Re: Creating a VPN to Checkpoint

#407

Author: Wolfgang Kueter
Date: Tue, 13 Aug 2002 21:59

23 lines
2255 bytes

Andrew Dickinson <d_a_dickinson@hotmail.com> wrote:
> The company I work for has some remote satellite offices that, as time
> goes on, need increasing connectivity to our central/corporate office.
> Currently we are using a Checkpoint VPN-1 and Firewall-1 4.1. Clients
> are all using Windows 9x or NT/Win2K and connecting with Securemote.
> In some of our remote offices we are now placing broadband
> connections, like ADSL, simply because of cost effectivess of these
> links. What I would like to be able to do though is have a
> appliance/router (like a Cisco 806 or possibly one of the Linksys
> units) that is capable of creating a IPSEC VPN tunnel from that remote
> office back to our Checkpoint Firewall at our central office.

Any Linux Box running FreeSwan should do.

http://www.freeswan.org/
http://www.freeswan.org/freeswan_trees/freeswan-1.95/doc/interop.html
http://support.checkpoint.com/kb/docs/public/firewall1/4_1/pdf/fw-linuxvpn.pdf

Wolfgang
-- 
A foreign body and a foreign mind,
never welcome in the land of the blind.
Peter Gabriel, Not one of us, 1980

Re: Creating a VPN to Checkpoint

#404

Author: rossi
Date: Sun, 18 Aug 2002 06:42

9 lines
1562 bytes

The Nortel Contivity will work as a branch office into the Checkpoint,
however, due to limitations in the Checkpoint, the tunnel must be
initiated from the Checkpoint (ie, initiator - responder with the
Checkpoint as initiator). I would suggest that you look into changing
the Checkpoint for a larger Contivity (2600?), and make the satellite
offices use either the older Contivity 100 (instant internet) or the
brand new Contivity 1000 series. This way you can have a reliable
branch office VPN solution and you can also have good client access
for those wanting to work from home.

Re: Creating a VPN to Checkpoint

#405

Author: Marc Appelbaum
Date: Mon, 26 Aug 2002 17:05

19 lines
2133 bytes

rossi141@hotmail.com (rossi) wrote in message news:<a03bbd19.0208172242.5688ac75@posting.google.com>...
> The Nortel Contivity will work as a branch office into the Checkpoint,
> however, due to limitations in the Checkpoint, the tunnel must be
> initiated from the Checkpoint (ie, initiator - responder with the
> Checkpoint as initiator). I would suggest that you look into changing
> the Checkpoint for a larger Contivity (2600?), and make the satellite
> offices use either the older Contivity 100 (instant internet) or the
> brand new Contivity 1000 series. This way you can have a reliable
> branch office VPN solution and you can also have good client access
> for those wanting to work from home.

Instead of ungrapding the Nortel, try using one of the CP Sofaware
applianaces.  It's basicly a scaled down version of CP for home/small
office use.  You can get them with site-to-site VPN functionality for
under $ 800....Take a look at www.sofaware.com.  Nokia is also
manufacturing the Nokia IP-30 for CP
(http://www.nokia.com/securitysolutions/platforms/30.html)

Marc

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads