[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Add another Public IP to Checkpoint

Posted on 2009-02-18
6
Medium Priority
?
472 Views
Last Modified: 2013-11-16
hi experts,

What's the procedure to add another public ip to the CP firewall R55 external interface?
Our platform is windows 2003 svr.

rgds,
Kenny
0
Comment
Question by:kenny_klbn
  • 2
4 Comments
 
LVL 18

Assisted Solution

by:larstr
larstr earned 400 total points
ID: 23685197
You don't normally do it the way you're asking on Checkpoint. 
Instead you normally setup the additional ip address in the NAT field of the object you want to NAT to and set it up as a static NAT address. 
Lars
0
 
LVL 18

Assisted Solution

by:deimark
deimark earned 1600 total points
ID: 23690130
larstr is indeed correct here bud.

Although you can assign more than 1 IP to an interface and Check Point will detect it, it is normally done through the assignment of NAT.

To be clear on this, can you tell us what you want the extra IP to be used for?
0
 

Author Comment

by:kenny_klbn
ID: 23698018
Hi deimark and larstr,

the extra ip is for our additional web server. will be assigning a static nat.

"the additional ip address in the NAT field of the object you want to NAT to and set it up as a static NAT address"......can you please elaborate, OR do you mean.. create a new node object (in my case, a new host) and enter the necessary details such as IP addresses (host's internal ip and static Nat ip)

"Although you can assign more than 1 IP to an interface and Check Point will detect it, it is normally done through the assignment of NAT".....does that mean i do not need to manually add the ip address in the TCP/IP | properties | IP settings at the OS level?


rgds

 
0
 
LVL 18

Accepted Solution

by:
deimark earned 1600 total points
ID: 23700344
If you are looking to add a new web server and have it assisgned a stsatic NAT IP, then all you need to do is:

1.  Create new host object for your web server using the internal (LAN) IP
2.  Under the NAT tab, select static NAT and enter the public NAT address you want users to access the web server on
3.  Create a rule to allow web traffic from outside to the web server
4.  Push policy

Thats it bud
0

Featured Post

Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as high-speed processing of the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question