Remote Management - IPSO box

[jemmahoff]

Hi Again 'tek-tips' forum readers,

Sorry but I have another question.

If you have a ipso box which has both the enforcement module and the management server, but then add another ipso device which is situated at a remote site - how do you administer the second box remotely which is also patched to the same LAN? Do I creat a checkpoint host object with NAT?

And stepping back a little, when setting up the second device what installations/configs do I need to carryout in order allowe the device to be managed by the first ipso box.

Thank you once again for your suggestions.

Jemma
XXX

 

[watchguardmonkey]

you have to set up the second box as a CP gateway on the management platform, on the new IPSO box you need to define the management platform and create SIC between the 2 for the management platform to manage the new device.

NAT; you say the the 2 platforms are on the same LAN segment? if this is true then no need for NAT.

If they are on different IP subnets and you are not accessing it from the Internet but across a PPP link then no NAT will be needed, if from the Internet then I would create a VPN between the 2 devices for management.

What I would probably do, is remove the management from the first platform onto a server/pc and manage both platforms from this.