topic Re: Publishing On-Prem Endpoint Server in Endpoint

Publishing On-Prem Endpoint Server

Romers — Fri, 09 Oct 2020 18:32:37 GMT

Is it practical to allow connections to an On-Prem Endpoint management server on the internet using its FQDN?? I would like persons off the corporate network to receive product updates and so on via the internet. I have just about 300 or so home-based users.

I am looking for some guidance on this endeavor.

Re: Publishing On-Prem Endpoint Server

Chris_Atkinson — Sat, 10 Oct 2020 13:02:28 GMT

There are white papers published here about using a seperate policy server in your DMZ for this purpose. Depending on your existing licensing this may already be included within your entitlements.

Note if it's solely product updates of interest you have the ability to influence how those e.g A/V updates are received if the policy server or endpoint manager is unavailable i.e. direct from Check Point or other location.

Coming back to your original query yes it is something that is done by some customers (via NAT) depending on their internal policies, others may opt to achieve via VPN.

Re: Publishing On-Prem Endpoint Server

MikeB — Mon, 12 Oct 2020 20:54:39 GMT

here is the White Paper for this: https://community.checkpoint.com/t5/Endpoint-Security-Products/White-Paper-R80-20-Endpoint-Policy-Server-in-DMZ-for-External/m-p/52865#M1129