topic Re: Port Forwarding in Checkpoint in Firewall and Security Management

Port Forwarding in Checkpoint

ThabEugS — Tue, 03 Dec 2024 10:32:59 GMT

Good Day

I am from a Fortinet background and currently working more on Checkpoint in the other there is what we call virtual IPs aka Port Forwarding i know we have Manual NAT in checkpoint but in the instance where i have multiple web servers and one static public IP provisioned by ISP say with a /30 subnet mask how can i go about Manual Nat in checkpoit say for expample my external IP is 178.xx.xx.1/30 and my LAN is 10.1.10.0/24 where i have web server 10.1.10.10:443 and another 10.1.10.11:8443 how can I achieve accessing this from public facing i have decided to change the ports due to 443 being used by another web server hence using 8443 for another server on the LAN.

Re: Port Forwarding in Checkpoint

Alex- — Tue, 03 Dec 2024 11:30:25 GMT

You have the notion of original port and translated port if this answers your question.

You can publish 8443 as original port and put 443 as translated port.

Re: Port Forwarding in Checkpoint

G_W_Albrecht — Tue, 03 Dec 2024 11:42:59 GMT

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuide/Content/Topics-SECMG/Configuring-NAT-Policy.htm

sk172933: NAT FAQ

sk60343: How to Troubleshoot NAT-related Issues

Re: Port Forwarding in Checkpoint

the_rock — Tue, 03 Dec 2024 12:35:44 GMT

Should be pretty easy. Just create manual static nat rule in smart console and make sure the info is right (original src, dst, translater src, dst and ports).

Ping me if you need help.

Andy

Re: Port Forwarding in Checkpoint

the_rock — Tue, 03 Dec 2024 13:07:14 GMT

@ThabEugS

Think of it this way and as trivial as this example is, I always give this to people. So say your friend wants to rdp into your computer at home, all you would need to do is create a "rule" in your home router that says from external to your internal IP on dst port 3389, thats it.

Makes sense?

Andy

Re: Port Forwarding in Checkpoint

ThabEugS — Tue, 03 Dec 2024 13:22:55 GMT

Yes that i all understand i was wondering on checkpoints GAIA in this instance i know about the manual nat I was just wondering how i can workaround if i have multiple hosts that need to be publicly accessible and there are accessed through port 443 so i will explore original port and translated port.

Re: Port Forwarding in Checkpoint

the_rock — Tue, 03 Dec 2024 13:37:21 GMT

I see what you mean. For that, yea, you may need to change the port.