Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 775
  • Last Modified:

Check Point VPN connection from a Hotel to your Corporate Site.

This has got to be a common problem.  So what are some of the solutions?  You have a user at a hotel sitting behind the hotel's firewall and they want to connect to your corporate site. I'm using Check Point NG FP3 and SecureClient.
0
mobot
Asked:
mobot
1 Solution
 
Justin DurrantSr. Engineer - Windows Server/VirtualizationCommented:
Hi mobot,


These are really hard to troubleshoot since you don't know what restrictions the hotel might have on their firewall.

JJ
0
 
lrmooreCommented:
Many hotel highspeed connections give you the option of accepting a public IP address, specifically if you want to VPN back to your corporate network, or a private IP behind their firewall. Even with a firewall, most hotels have already made provisions to permit all types of VPN's.
0
 
csalisburyCommented:
Most hotels firewalls I've had the chance to look at deny very little outbound traffic if any at all for their 'guests'.  And those that do have the common sense to open IKE, ESP, etc... If you find this is becomming a major problem you may want to look into some of the great SSL VPN solutions out there like F5's Firepass, or Juniper Networks Neoteris.  Both of these appliances are rock solid, but I'd lean towards the Firepass... Good Luck!
0
Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

 
mobotAuthor Commented:
My concern is not the hotels allowing outbound traffic.  It's will they allow inbound traffic back from my site.  I'm told the challenge is not getting out, it's getting back in.  Am I misunderstanding how the VPN works?  That is, if a connection is successfully made between the user at the hotel and my site.  Then the traffic from my site is being accepted by the hotel firewall and allowed to pass through it, and back to the user.  If the hotel's firewall rejects or drop the traffic from my site the user at the hotel will never make a successful connection in the first place.
0
 
lrmooreCommented:
>the traffic from my site is being accepted by the hotel firewall and allowed to pass through it, and back to the user
No. The firewall will never see the traffic. It is tunneled in an encrypted stream from your VPN endpoint direct to the user. All the firewall sees is a connection to your public IP address.
0
 
BCSCOPSCommented:
There is something called Visitor Mode Checkpoint claims that it will overcome this problem ( of Hotels blocking IPSec traffic ). Haven't tried it yet but will be looking at it. In the meantime we deal with this on a case by case by talking to the hotels' helpdesk. I have noticed though that more and more hotels have addressed this issue...
0

Featured Post

The Lifecycle Approach to Managing Security Policy

Managing application connectivity and security policies can be achieved more effectively when following a framework that automates repeatable processes and ensures that the right activities are performed in the right order.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now