topic Re: Unable to connect aws instance from internet in Cloud Firewall https://community.checkpoint.com/t5/Cloud-Firewall/Unable-to-connect-aws-instance-from-internet/m-p/3477#M4233 <HTML><HEAD></HEAD><BODY><P>Thanks a lot Dameon. </P><P></P><P>I am able to access now. I assigned a private ip to external interface, associated that IP with elastic IP and then wrote one NAT rule for destination.</P><P></P><P>That was really helpful</P></BODY></HTML> Tue, 30 May 2017 06:11:41 GMT Kumar_Sambhav 2017-05-30T06:11:41Z Unable to connect aws instance from internet https://community.checkpoint.com/t5/Cloud-Firewall/Unable-to-connect-aws-instance-from-internet/m-p/3475#M4231 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>This is for AWS:</P><P></P><P>I am unable to connect to ec2 instances from Internet,which are behind vSec firewall. I have given elastic IP to instance and on firewall natted the instance object with eslactic IP. </P><P>I do not see the traffic on firewall itself. Any help/suggestions are appreciated.</P></BODY></HTML> Mon, 29 May 2017 07:01:54 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Unable-to-connect-aws-instance-from-internet/m-p/3475#M4231 Kumar_Sambhav 2017-05-29T07:01:54Z Re: Unable to connect aws instance from internet https://community.checkpoint.com/t5/Cloud-Firewall/Unable-to-connect-aws-instance-from-internet/m-p/3476#M4232 <HTML><HEAD></HEAD><BODY><P>Did you put the elastic IP on the vSEC instance or the instance you're trying to protect?</P><P>The packet flow must be: Internet &gt; vSEC Gateway &gt; EC2 instance.</P><P>Which means the elastic IP must be associated with a secondary interface on the vSEC instance.</P><P>Refer to the <A href="http://downloads.checkpoint.com/dc/download.htm?ID=45816">R77.30 vSEC for Amazon Web Services (AWS) Getting Started Guide</A>​ for the correct steps.</P></BODY></HTML> Mon, 29 May 2017 13:29:20 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Unable-to-connect-aws-instance-from-internet/m-p/3476#M4232 PhoneBoy 2017-05-29T13:29:20Z Re: Unable to connect aws instance from internet https://community.checkpoint.com/t5/Cloud-Firewall/Unable-to-connect-aws-instance-from-internet/m-p/3477#M4233 <HTML><HEAD></HEAD><BODY><P>Thanks a lot Dameon. </P><P></P><P>I am able to access now. I assigned a private ip to external interface, associated that IP with elastic IP and then wrote one NAT rule for destination.</P><P></P><P>That was really helpful</P></BODY></HTML> Tue, 30 May 2017 06:11:41 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Unable-to-connect-aws-instance-from-internet/m-p/3477#M4233 Kumar_Sambhav 2017-05-30T06:11:41Z