Distributed Config - Management Station on Internal Private IP

[ChrisMWCI]

Scenario:

NG IP 530 Module
NG Managment Station on internal network on private IP - static NAT to Public IP
Remote Modules (IP71 NG VPN-PRO, to be managed by internal Managment Station) accross the Internet

Problem: Managment Station can initiate SIC and communicate with remote modules but the policy fails to install.

Is this a valid configuration or should the Management Station be put on Public IP address (and not NATed)?

Any help/pointers appreciated.

 

[sharpkings]

Just a quick thought -I assume you are running small office - it may sound stupid but - are the IP71's deffinately an NG version ?

I very recently set up a similar scenario and ordered 71's with NG and had huge probs until I checked the version on the 71's to find they were 4.1

I was then told that NG was not available for the 71 !! I then had to downgrade the 71's licences and configure them as 4.1 versions on the management before getting it to work. I understand now that the 71 is also no longer available...

Also the management station - is this the fully blown FW1 Management or the small office ? The free small office management can only manage local devices..

Other than that it is a workable scenario..

Let me know if it's still causing probs.