HI!
One of our client has a network connected to the Internet via Cisco PIX 515 (5.2) firewall and a F.R. line to the ISP .
The PIX is configured with PAT for clients connecting to outside,
and is blocking any trafic from outside other then SMTP to a specific server (using STATIC IP mapping only to that server).
I have a very limited knowledge with FW-1 but I know enough about the PIX and TCP/IP , IPSEC etc..
Some of the workstations (about 10) need access to a partner network using
SecuRemote. I don't currently have details about the partner's configuration or software version - only the information the client needs to know - IP, credentials and so.
We have tested connecting a client with SecuRemote using dial-up to the ISP
bypassing the firewall and it went fine.
Currently when trying to connect through the firewall we fail.
(It seems like the initial connection works but then drops or something like that).
I have no direct access to the partner FW to debug from their side.
I guess the answer might be simple, but I didn't find it in CheckPoint site -
How should I configure the PIX to allow clients from inside to connect with
SecuRemote to a server in the Internet?
Thanks
Yizhar
One of our client has a network connected to the Internet via Cisco PIX 515 (5.2) firewall and a F.R. line to the ISP .
The PIX is configured with PAT for clients connecting to outside,
and is blocking any trafic from outside other then SMTP to a specific server (using STATIC IP mapping only to that server).
I have a very limited knowledge with FW-1 but I know enough about the PIX and TCP/IP , IPSEC etc..
Some of the workstations (about 10) need access to a partner network using
SecuRemote. I don't currently have details about the partner's configuration or software version - only the information the client needs to know - IP, credentials and so.
We have tested connecting a client with SecuRemote using dial-up to the ISP
bypassing the firewall and it went fine.
Currently when trying to connect through the firewall we fail.
(It seems like the initial connection works but then drops or something like that).
I have no direct access to the partner FW to debug from their side.
I guess the answer might be simple, but I didn't find it in CheckPoint site -
How should I configure the PIX to allow clients from inside to connect with
SecuRemote to a server in the Internet?
Thanks
Yizhar