Help with Eval. of R55 - Can't access WWW from LAN

[PartlyDave]

I'm evaluating Checkpoint R55 on W2K Server in a test network.

It's a simple setup, one interface for external, one for internal. Default gateway is configured on the external interface only, and IP Routing is enabled.

I have only two rules, one contains entries for HTTP, HTTPS, and Ping (ICMP Echo Request), and the other is the standard "drop" or "cleanup" cleanup rule.

I can ping from the LAN out to the

http://WWW by

name or IP address and responses come back fine, so name resolution is working, but I can't open a browser and bring up a web page. The browser always produces an error message.

If I look in the Checkpoint monitor I can see an error message for the

http://WWW session

that reads "TCP Packet out of state. First Packet isn't SYN."

Does anyone have any ideas?

 

[PartlyDave]

I figured out my own problem. I was expecting NAT to be installed and configured automatically but it was not. Once I got NAT working my problme was solved.