Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

CheckPoint / ISA Server Firewall

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> CheckPoint / ISA Server Firewall Page: [1]
Login
Message << Older Topic   Newer Topic >>
CheckPoint / ISA Server Firewall - 17.Feb.2006 2:57:07 PM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
We currently have checkpoint firewall installed on our network. I dont want to replace this with ISA server right away, but I want to install ISA server do some testing and as soon as I know everything about ISA I will replace it.

How should I configure My ISA server so it works with check point togather as backend firewall. can someone please guide me to right direction?

Currnetly there is some NAT done on checkpoint firewall, I want same thing on ISA how I do that so I can test that.

thanks
Post #: 1
RE: CheckPoint / ISA Server Firewall - 17.Feb.2006 3:12:13 PM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
I am not sure If I asked the right question but here's what I am looking for NAT

my private ip is xxx.xxx.xxx.122 for internal network
if I want to access my pc from home how can I directly access using RemoteDesktop.

currently there is some kind of translation done on firewall or cisco router I am not sure where? how can I handle this in ISA Server.

(in reply to bhavin78)
Post #: 2
RE: CheckPoint / ISA Server Firewall - 17.Feb.2006 3:21:21 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
ISA can be made to work in tandem with CheckPoint, but it will never be a drop-in replacement because ISA cannot do 1:1 NAT.

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to bhavin78)
Post #: 3
RE: CheckPoint / ISA Server Firewall - 17.Feb.2006 3:24:02 PM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
can you explain me in more details, I am not sure what you mean to say as I trying to learn

(in reply to LLigetfa)
Post #: 4
RE: CheckPoint / ISA Server Firewall - 27.Feb.2006 3:30:24 PM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
what's the work around?
Here's what I am trying to do?

My pc is configured with firewall client?
I am using IP address which is routable IP address?
what I need to do so that I can access my PC from internet and NAT takes place at ISA server? I know you told me 1:1 NAT is not supported, but any other work around?

(in reply to bhavin78)
Post #: 5
RE: CheckPoint / ISA Server Firewall - 28.Feb.2006 10:29:57 PM   
tshinder

 

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi B,

The ISA firewall uses Server and Web Publishing Rules to enable remote access to resources located behind the ISA firewall.

What protocols do you want to use to access the PC behind the ISA firewall?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bhavin78)
Post #: 6
RE: CheckPoint / ISA Server Firewall - 1.Mar.2006 2:45:24 PM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
This is what I am trying to do.
I want to connect to my PC directly from home using Remote desktop.

On my home PC I need to open Remote desktop and just use ip address of my pc.

Right now this is working with routeable IP address and NAT translation on check point fire wall.

I want to do same thing with ISA server.

and'

I am trying to get rid of checkpoint firewall so how should I start. I dont want to take off checkpoint firewall until I am good at ISA and everything works as expected. I am very knew so please reply accordingly.

Thanks

(in reply to tshinder)
Post #: 7
RE: CheckPoint / ISA Server Firewall - 5.Mar.2006 5:46:23 PM   
tshinder

 

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi B,

OK, in that case just create an RDP Server Publishing rule.

Make sure the PC is configured as a SecureNAT client.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bhavin78)
Post #: 8
RE: CheckPoint / ISA Server Firewall - 6.Mar.2006 3:17:09 PM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
what PC should be configured as SecureNAT client and on what server should be published by RDP server Publishing rule.

(in reply to tshinder)
Post #: 9
RE: CheckPoint / ISA Server Firewall - 13.Mar.2006 4:02:15 PM   
tshinder

 

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi B,

The RDP server should be configured as a SecureNAT client.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bhavin78)
Post #: 10
RE: CheckPoint / ISA Server Firewall - 10.Apr.2006 2:44:11 PM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
This is MY PC and not server.
So I create a publishing rule for my pc?
what IP address do I use from home to connect to my PC at work?
 
Do I need to create a DMZ and put my PC in DMZ?

(in reply to tshinder)
Post #: 11
RE: CheckPoint / ISA Server Firewall - 15.Apr.2006 8:14:41 PM   
tshinder

 

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi B,

You need to connect to the address used in the listener being used by the RDP server publishing rule.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bhavin78)
Post #: 12

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> CheckPoint / ISA Server Firewall Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts