New Check Point Admin - NAT over site to site VPN

hbliss4 — Sun, 23 Oct 2022 17:21:44 GMT

I have a VPN that I need to NAT the IP addresses for my devices on. In ASA I would just create a NAT rule that was specific for that connection, as well I was able to create a NAT range for any connections that came from my internal IPs over that VPN.

I have 4 devices that need NAT'd through this VPN, traffic coming from the VPN does not need to be NAT'd but needs to reach the 4 host devices. Hope this makes sense.

Remote Network: 10 devices with static IPs (I have no control over this network)

Local Network: 4 devices in a 172.19.66.0/23 subnet, NAT'd IPs need to be in the 192.168.10.64/28

Looking for help on how the VPN, Host and Policy Rules should be built.

Re: New Check Point Admin - NAT over site to site VPN

_Val_ — Mon, 24 Oct 2022 10:56:04 GMT

There are quite a few discussions available in the community for the matter, for example: https://community.checkpoint.com/t5/Management/Private-to-Private-NAT-on-IPSEC-VPN/td-p/21635

Let me know if it helps.

topic Re: New Check Point Admin - NAT over site to site VPN in Firewall and Security Management

New Check Point Admin - NAT over site to site VPN

Re: New Check Point Admin - NAT over site to site VPN