topic src/dst check for RDS instances in AWS in Cloud Firewall https://community.checkpoint.com/t5/Cloud-Firewall/src-dst-check-for-RDS-instances-in-AWS/m-p/33266#M3817 <HTML><HEAD></HEAD><BODY><P>Hi there,</P><P></P><P>As you know when deploying CloudGuard in AWS, you must turn off src/dst check. When dealing with RDS instances you cannot turn this option off. It looks like the only way a server behind a CloudGuard gateway can access an RDS instance on a different subnet is to create a NAT rule nat'ing the src IP to&nbsp;that of an IP&nbsp;on the same subnet as the RDS instance.&nbsp;</P><P></P><P>Is this true? Or is there another way?</P><P></P><P>Thx,</P><P></P><P>Ryan</P></BODY></HTML> Thu, 01 Mar 2018 17:33:19 GMT Ryan_St__Germai 2018-03-01T17:33:19Z src/dst check for RDS instances in AWS https://community.checkpoint.com/t5/Cloud-Firewall/src-dst-check-for-RDS-instances-in-AWS/m-p/33266#M3817 <HTML><HEAD></HEAD><BODY><P>Hi there,</P><P></P><P>As you know when deploying CloudGuard in AWS, you must turn off src/dst check. When dealing with RDS instances you cannot turn this option off. It looks like the only way a server behind a CloudGuard gateway can access an RDS instance on a different subnet is to create a NAT rule nat'ing the src IP to&nbsp;that of an IP&nbsp;on the same subnet as the RDS instance.&nbsp;</P><P></P><P>Is this true? Or is there another way?</P><P></P><P>Thx,</P><P></P><P>Ryan</P></BODY></HTML> Thu, 01 Mar 2018 17:33:19 GMT https://community.checkpoint.com/t5/Cloud-Firewall/src-dst-check-for-RDS-instances-in-AWS/m-p/33266#M3817 Ryan_St__Germai 2018-03-01T17:33:19Z