Solved

Check Point VPN connection from a Hotel to your Corporate Site.

Posted on 2004-09-15
6
720 Views
Last Modified: 2013-11-16
This has got to be a common problem.  So what are some of the solutions?  You have a user at a hotel sitting behind the hotel's firewall and they want to connect to your corporate site. I'm using Check Point NG FP3 and SecureClient.
0
Comment
Question by:mobot
6 Comments
 
LVL 23

Expert Comment

by:Justin Durrant
ID: 12066757
Hi mobot,


These are really hard to troubleshoot since you don't know what restrictions the hotel might have on their firewall.

JJ
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 250 total points
ID: 12067111
Many hotel highspeed connections give you the option of accepting a public IP address, specifically if you want to VPN back to your corporate network, or a private IP behind their firewall. Even with a firewall, most hotels have already made provisions to permit all types of VPN's.
0
 

Expert Comment

by:csalisbury
ID: 12115037
Most hotels firewalls I've had the chance to look at deny very little outbound traffic if any at all for their 'guests'.  And those that do have the common sense to open IKE, ESP, etc... If you find this is becomming a major problem you may want to look into some of the great SSL VPN solutions out there like F5's Firepass, or Juniper Networks Neoteris.  Both of these appliances are rock solid, but I'd lean towards the Firepass... Good Luck!
0
Register Today - IoT Current and Future Threats

Are you prepared to protect your organization from current and future IoT Threats?  Join our Wi-Fi expert in episode three of our webinar series for a look at the current state of Wi-Fi IoT and what may lie ahead. Register for our live webinar on April 20th at 9 am PDT!

 

Author Comment

by:mobot
ID: 12128270
My concern is not the hotels allowing outbound traffic.  It's will they allow inbound traffic back from my site.  I'm told the challenge is not getting out, it's getting back in.  Am I misunderstanding how the VPN works?  That is, if a connection is successfully made between the user at the hotel and my site.  Then the traffic from my site is being accepted by the hotel firewall and allowed to pass through it, and back to the user.  If the hotel's firewall rejects or drop the traffic from my site the user at the hotel will never make a successful connection in the first place.
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 12128652
>the traffic from my site is being accepted by the hotel firewall and allowed to pass through it, and back to the user
No. The firewall will never see the traffic. It is tunneled in an encrypted stream from your VPN endpoint direct to the user. All the firewall sees is a connection to your public IP address.
0
 

Expert Comment

by:BCSCOPS
ID: 13596152
There is something called Visitor Mode Checkpoint claims that it will overcome this problem ( of Hotels blocking IPSec traffic ). Haven't tried it yet but will be looking at it. In the meantime we deal with this on a case by case by talking to the hotels' helpdesk. I have noticed though that more and more hotels have addressed this issue...
0

Featured Post

Watch Anatomy of a Wi-Fi Hack On-Demand

In less than a weekend, anyone with Internet access and some free time can become a Wi-Fi MitM to wreak havoc on your network. View our Wi-Fi Expert in an on-demand episode of our Secure Wi-Fi mini-series as he explores the motives, execution, and anatomy of a Wi-Fi hack.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question