topic Re: Managing endpoint clients when they are outside of the LAN in Endpoint

Managing endpoint clients when they are outside of the LAN

s_milidrag — Sun, 02 Nov 2025 04:37:50 GMT

For the purpose of managing endpoint clients when they are outside the Local network with an on-prem management server, I have had to expose the management server to the Internet (static NAT) and create a firewall rule to allow only HTTPS communication.

Is this safe, since I see a lot of connections & attack attempts on my EP SMS?

Endpoint SMS is behind the Check Point firewall, and I am also using the same SMS to manage firewalls.

Thanks

Re: Managing endpoint clients when they are outside of the LAN

Chris_Atkinson — Sun, 02 Nov 2025 06:16:52 GMT

Likely you qualify for an "Endpoint Policy server" license that you can put in the DMZ as an alternative if you would prefer.

Re: Managing endpoint clients when they are outside of the LAN

s_milidrag — Sun, 02 Nov 2025 06:35:48 GMT

Thanks,

I think this is the only reasonable setup

Re: Managing endpoint clients when they are outside of the LAN

the_rock — Mon, 03 Nov 2025 01:38:56 GMT

What Chris said definitely makes sense.