External IP address as the IP of the object

First of all you should have a central license, this is
better because even
if you change the ip address of the modules or you change
the module there
is no need to modify your license, you just detach and
attach to another
one.


Your firewall should have the external ip address for your
vpn's.


Regards,
Lino


 
 


-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of Flores
Portillo, Israel
Sent: Viernes, 30 de Junio de 2006 09:05 a.m.
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] External IP address as the IP of the object

Hi Gurus,

 

            Does somebody know what problems would I have if
the IP Address
of my firewall object is not its IP address from the
external interface? I
have read some place that administrator should configure the
external IP
address as the IP for the firewall object, but I don't why.

 

            I am making a fresh installation but I am
planning an IP address
change for the external interfaces in two months therefore I
will need to
relicense (somebody knows how many times can I do this?).
Maybe I could
license to the internal IP address to avoid the license
again later.

 

            I have a cluster with two firewalls, and another
possibility is
to define the firewall objects with an internal IP address
(the license
would attached to this one) and define the cluster object
with the external
IP address, how that sounds? Will I have problems later?

 

Anyone could give an advice?  

  

Israel Flores Portillo

 


=================================================
To set vacation, Out-Of-Office, or away messages, send an
email to
LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription
options, email
fw-1-ownerts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================