RE: Checkpoint for internet access

["Kalat, Andrew (ISS Atlanta)" <akalat () iss net>]

Good day,
        Yep, that's pretty much the way it works. Checkpoint should be
thought of as a router from a routing and network topology standpoint. I've
done a few conversions of Proxy based FW environments to Checkpoint, and
every time the networking staff really cringes at having to start doing
default routes in their network. 
---------------------------------------------------------
Andrew J. Kalat,                | Voice: (678)443-6000  
IT Infrastructure Manager       | Fax:   (678)443-6484
Internet Security Systems, Inc. | E-Mail: akalat () iss net
6600 Peachtree-Dunwoody Road    | http://www.iss.net/
300 Embassy Row, Suite 500      | PGP key available.
Atlanta, GA 30328               | 
Note: Comments are my own, yadda...yadda...

-----Original Message-----
From: Andrew J Bernoth/Boulder/IBM [mailto:bernoth () us ibm com]
Sent: Thursday, October 19, 2000 4:59 PM
To: firewall-wizards () nfr net
Subject: [fw-wiz] Checkpoint for internet access


G'day Wizards,

Please bear with me if this is basic knowledge, I have not played with
Checkpoint yet.

I have a checkpoint administrator with his firewall providing access to the
internet.  I don't really like the idea of having a default route pointing
out to the internet, but he assures me this is the only configuration the
Checkpoint can do.  Is this true?  How do others deal with this?

I am more used to either a socks or proxy configuration for an internet
firewall.

Thanks

Regards,
Andrew J Bernoth
bernoth () us ibm com
"The views expressed above are my own and do not necessarily reflect those
of IBM"


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards