topic Re: How do I NAT separate EPM server so that clients can connect over internet in Endpoint

How do I NAT separate EPM server so that clients can connect over internet

Blason_R — Sat, 23 Oct 2021 05:44:58 GMT

Hi Team,

I have setup EPM R81 as a dedicated server while my perimeter firewalls are Check Point 6400 cluster with Magmt server. Now since I setup EPM server wondering how do I setup NAT so that clients connecting to EPM can connect over internet?

EPM server does not have a NAT option hence wondering what option should I apply? I do not have any Policy server.

TIA

Blason R

Re: How do I NAT separate EPM server so that clients can connect over internet

Chris_Atkinson — Sat, 23 Oct 2021 12:00:15 GMT

Manual, static where needed.

There is a white paper here that describes an approach including NAT.

https://community.checkpoint.com/t5/Endpoint/White-Paper-R80-20-Endpoint-Policy-Server-in-DMZ-for-External/m-p/52865#M1129

Re: How do I NAT separate EPM server so that clients can connect over internet

Blason_R — Mon, 25 Oct 2021 02:51:25 GMT

Agree and thanks for the paper - However is it mandatory that we need to have policy server to NAT the traffic? What if customer has not purchased a policy server license?

Re: How do I NAT separate EPM server so that clients can connect over internet

Chris_Atkinson — Mon, 25 Oct 2021 03:06:29 GMT

Not mandatory to my knowledge. Note that policy server licenses entitlements may already be covered depending on your EPM license, refer: sk61832

Re: How do I NAT separate EPM server so that clients can connect over internet

Blason_R — Wed, 27 Oct 2021 06:51:30 GMT

Surprisingly - I followed that and I am on R81. However I am not seeing NAT tab in smart console for my policy server. Is something changed in R81?

Re: How do I NAT separate EPM server so that clients can connect over internet

Blason_R — Wed, 27 Oct 2021 07:45:58 GMT

This is really weird. NAT Tab is not appearing in my smart console. Is this a bug or anything that needs to be activated?