Solved

Check Point VPN connection from a Hotel to your Corporate Site.

Posted on 2004-09-15
6
705 Views
Last Modified: 2013-11-16
This has got to be a common problem.  So what are some of the solutions?  You have a user at a hotel sitting behind the hotel's firewall and they want to connect to your corporate site. I'm using Check Point NG FP3 and SecureClient.
0
Comment
Question by:mobot
6 Comments
 
LVL 23

Expert Comment

by:Justin Durrant
ID: 12066757
Hi mobot,


These are really hard to troubleshoot since you don't know what restrictions the hotel might have on their firewall.

JJ
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 250 total points
ID: 12067111
Many hotel highspeed connections give you the option of accepting a public IP address, specifically if you want to VPN back to your corporate network, or a private IP behind their firewall. Even with a firewall, most hotels have already made provisions to permit all types of VPN's.
0
 

Expert Comment

by:csalisbury
ID: 12115037
Most hotels firewalls I've had the chance to look at deny very little outbound traffic if any at all for their 'guests'.  And those that do have the common sense to open IKE, ESP, etc... If you find this is becomming a major problem you may want to look into some of the great SSL VPN solutions out there like F5's Firepass, or Juniper Networks Neoteris.  Both of these appliances are rock solid, but I'd lean towards the Firepass... Good Luck!
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:mobot
ID: 12128270
My concern is not the hotels allowing outbound traffic.  It's will they allow inbound traffic back from my site.  I'm told the challenge is not getting out, it's getting back in.  Am I misunderstanding how the VPN works?  That is, if a connection is successfully made between the user at the hotel and my site.  Then the traffic from my site is being accepted by the hotel firewall and allowed to pass through it, and back to the user.  If the hotel's firewall rejects or drop the traffic from my site the user at the hotel will never make a successful connection in the first place.
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 12128652
>the traffic from my site is being accepted by the hotel firewall and allowed to pass through it, and back to the user
No. The firewall will never see the traffic. It is tunneled in an encrypted stream from your VPN endpoint direct to the user. All the firewall sees is a connection to your public IP address.
0
 

Expert Comment

by:BCSCOPS
ID: 13596152
There is something called Visitor Mode Checkpoint claims that it will overcome this problem ( of Hotels blocking IPSec traffic ). Haven't tried it yet but will be looking at it. In the meantime we deal with this on a case by case by talking to the hotels' helpdesk. I have noticed though that more and more hotels have addressed this issue...
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question