topic Re: Use of Reverse Proxy for Capsule Docs in Endpoint https://community.checkpoint.com/t5/Endpoint/Use-of-Reverse-Proxy-for-Capsule-Docs/m-p/23253#M2874 <HTML><HEAD></HEAD><BODY><P>For what I know using a reverse proxy is a best practice for security reasons. The reverse proxy is the only one device / IP&nbsp;able to communicate with your MSM . Nat instead permits to everybody to communicate with the MSM. As you can understand there are much more possibilies to expose your keys to the world using NAT.&nbsp;</P></BODY></HTML> Wed, 29 Aug 2018 20:15:28 GMT Claudio_Bolcato 2018-08-29T20:15:28Z Use of Reverse Proxy for Capsule Docs https://community.checkpoint.com/t5/Endpoint/Use-of-Reverse-Proxy-for-Capsule-Docs/m-p/23252#M2873 <HTML><HEAD></HEAD><BODY><P>Does a reverse proxy have to be used for Capsule Docs? Can I just use a NAT on the firewall limited down to TCP/443?</P><P></P><P>All documentation refers to using a reverse proxy, but I can't see any reason why we can't just use a NAT (other than security reasons)</P></BODY></HTML> Wed, 29 Aug 2018 14:07:45 GMT https://community.checkpoint.com/t5/Endpoint/Use-of-Reverse-Proxy-for-Capsule-Docs/m-p/23252#M2873 Daniel_Collins 2018-08-29T14:07:45Z Re: Use of Reverse Proxy for Capsule Docs https://community.checkpoint.com/t5/Endpoint/Use-of-Reverse-Proxy-for-Capsule-Docs/m-p/23253#M2874 <HTML><HEAD></HEAD><BODY><P>For what I know using a reverse proxy is a best practice for security reasons. The reverse proxy is the only one device / IP&nbsp;able to communicate with your MSM . Nat instead permits to everybody to communicate with the MSM. As you can understand there are much more possibilies to expose your keys to the world using NAT.&nbsp;</P></BODY></HTML> Wed, 29 Aug 2018 20:15:28 GMT https://community.checkpoint.com/t5/Endpoint/Use-of-Reverse-Proxy-for-Capsule-Docs/m-p/23253#M2874 Claudio_Bolcato 2018-08-29T20:15:28Z