[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: CheckPoint SecureRemote Client through pf



Works fine here as well.  There are issues when the NAT'd network behind
the user's firewall overlaps with the destination encryption domain, but
that's about it AFAIK.
-----Original Message-----
From: owner-pf@benzedrine.cx [mailto:owner-pf@benzedrine.cx] On Behalf
Of Camiel Dobbelaar
Sent: Saturday, March 01, 2003 4:13 AM
To: siivv
Cc: pf@benzedrine.cx
Subject: Re: CheckPoint SecureRemote Client through pf
I have secureclient working fine here through a pf firewall, with NAT.
No special tricks really...  if I tcpdump I first see isakmp traffic
(500/udp), then encapsulated traffic using 2746/udp.
Let me know if you need more info.
--
Cam
On Fri, 28 Feb 2003, siivv wrote:
>
> Is a connection with the checkpoint secureremote client possible 
> through a obsd 3.2 nat'd pf firewall?  I am refering to an outbound 
> connection from my home network, through the pf fwall, and to the 
> checkpoint fwall
>
> I have read that it is not possible with NAT, but figured I would run 
> it by those who may have used it.
>
> Also, if this is possible, can someone point me in the direction of 
> documentation or explain how exactly it can be done