topic Re: NAT diferent ISPs to a single Host IP in Firewall and Security Management

NAT diferent ISPs to a single Host IP

mrl_sousa — Wed, 18 Sep 2019 16:30:26 GMT

Hi,

I have 2 ISPs( ISP1 and ISP2) and i would like to do a static NAT from both ISPs( 1 and 2) to a Specific internal machine ( WEB-1). I would like to know if this works? Because Checkpoint Accepted the configuration but i can only get to the WEB-1 using one of the Public IPs ( ISP1) .

I'm new to checkpoint.

Regards,

Mauro

Re: NAT diferent ISPs to a single Host IP

Gomboragchaa — Thu, 19 Sep 2019 01:08:49 GMT

You can create manual NAT on firewall. It will be accessible from external.

But I think egress connection choose only one ISP. When you create Manual Nat, you should create ARP Proxy. I hope you find guide from CheckPoint site 🙂

Re: NAT diferent ISPs to a single Host IP

mrl_sousa — Thu, 19 Sep 2019 09:25:54 GMT

thank you for the feedback., i will try to find the guide .

Regards,

Mauro de Sousa

Re: NAT diferent ISPs to a single Host IP

FedericoMeiners — Thu, 19 Sep 2019 12:33:52 GMT

Hello,

I think that you will need load share of ISP redundancy for this to work, if not the returning packets will be always sent to the default gateway.

Regards,