https://community.checkpoint.com/t5/Firewall-and-Security-Management/Public-IP-of-VPN-gateway-in-the-encryption-domain/m-p/141523#M21854 <P>Hello,</P><P>Remote site: Cisco ASA with a public IP. The requirement is to use this public IP in the encryption domain (they do NAT on their end).</P><P>Our site: Check Point R80.40.&nbsp;</P><P>Traffic flow: from remote site.</P><P>When I create an interoperable object, can I use the IP address of the object in the encryption domain?&nbsp; Since I cannot chose&nbsp;interoperable object from VPN Domain &gt; User defined shall I create a host with the same IP and use host object instead?&nbsp; Or specifying the external interface with IP assigned for the&nbsp;interoperable object and then choosing All IP Addresses behind Gateway is preferred? Or it's the same?</P><P>Thank you.</P> Tue, 15 Feb 2022 09:36:43 GMT Teddy_Brewski 2022-02-15T09:36:43Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Public-IP-of-VPN-gateway-in-the-encryption-domain/m-p/141523#M21854 <P>Hello,</P><P>Remote site: Cisco ASA with a public IP. The requirement is to use this public IP in the encryption domain (they do NAT on their end).</P><P>Our site: Check Point R80.40.&nbsp;</P><P>Traffic flow: from remote site.</P><P>When I create an interoperable object, can I use the IP address of the object in the encryption domain?&nbsp; Since I cannot chose&nbsp;interoperable object from VPN Domain &gt; User defined shall I create a host with the same IP and use host object instead?&nbsp; Or specifying the external interface with IP assigned for the&nbsp;interoperable object and then choosing All IP Addresses behind Gateway is preferred? Or it's the same?</P><P>Thank you.</P> Tue, 15 Feb 2022 09:36:43 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Public-IP-of-VPN-gateway-in-the-encryption-domain/m-p/141523#M21854 Teddy_Brewski 2022-02-15T09:36:43Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Public-IP-of-VPN-gateway-in-the-encryption-domain/m-p/141717#M21903 <P>I believe the gateway IP is implicitly included in the encryption domain.<BR />It shouldn’t be necessary to include it.</P> Wed, 16 Feb 2022 21:48:42 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Public-IP-of-VPN-gateway-in-the-encryption-domain/m-p/141717#M21903 PhoneBoy 2022-02-16T21:48:42Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Public-IP-of-VPN-gateway-in-the-encryption-domain/m-p/141721#M21904 <P>Phoneboy is right, its automatically included, for sure.</P> Wed, 16 Feb 2022 23:13:31 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Public-IP-of-VPN-gateway-in-the-encryption-domain/m-p/141721#M21904 the_rock 2022-02-16T23:13:31Z