Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

WatchGuard Firebox III 1000 and Nokia IP130

Posted on 2005-04-22
3
Medium Priority
?
873 Views
Last Modified: 2013-11-16
WatchGuard Firebox III 1000 and Nokia IP130

Currently I have a WatchGuard Firebox III 1000.  What I need to do is drop a Nokia IP130 SSL VPN appliance into my network

I know someone is probably wondering why I am adding the Nokia VPN appliance when the WatchGuard Firebox offers a VPN solution.  Well the reason is that we are in health care so I need the most secure tunneling so I choose SSL over IPsec.

What I am hoping for is someone with either direct experience or just over all skills to give me some help; insight or direction has to how to do this.

Thanks for your time
0
Comment
Question by:dclima
1 Comment
 
LVL 3

Accepted Solution

by:
Paul_Howard_D7 earned 2000 total points
ID: 13865994
Well i have not dealt with the IP130 directly, but the basic approach is to open up port 80 and 443 on the firewall pointing to the internal IP130 Appliance, this is where the SSL tunnel will effectivley be terminated, behind the firewall, you will then need to setup a DNS host entry, pointing to the external IP on the Watchguard that you NAT'd back to the IP130 example: vpn.yourcompany.com

When users connect to the SSL/VPN portal they will need to put https://vpn.yourcompany.com in their browser this would give them an authentication page, once authenticated the client software is deployed, they will either get direct acces to the LAN or a landing page, dependant on product and configuration.

As long as the users dont close the browser the VPN session will remain active.

If your confident your users will remmeber to put in the " HTPS:// " part in when connecting you could close the port 80 keeping things tighter, the choice is yours. :)

Its quite brief but its an overview ;)

Any more questions please ask.

Paul
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Kernel Data Recovery is a renowned Data Recovery solution provider which offers wide range of softwares for both enterprise and home users with its cost-effective solutions. Let's have a quick overview of the journey and data recovery tools range he…
Suggested Courses
Course of the Month13 days, 15 hours left to enroll

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question