topic Endpoint Management Server Static NAT address in Endpoint

Endpoint Management Server Static NAT address

Don_Paterson — Tue, 18 Jul 2023 10:02:18 GMT

How does the Harmony Endpoint client deal with communications to the on-prem. EPMS when it is Statically NAT'd?

I see that in the config.dat (in the MSI (initial client installer)) that the EPMS is referenced using both IP addresses (in <server>) and the same Cert but the question is how does the client choose the IP address.

Obviously it can send to both IP addresses and wait for responses but is there more to it, like priority or location awareness?

Thanks,

Don

Re: Endpoint Management Server Static NAT address

PhoneBoy — Tue, 18 Jul 2023 20:45:50 GMT

I believe it is "first to respond."
I recall this behavior can be configured, but am having trouble locating the precise documentation for this.

Re: Endpoint Management Server Static NAT address

Blason_R — Mon, 11 Mar 2024 03:26:41 GMT

Hi Team,

Pertaining to this - How the EPM server should be natted then? A simple Static NAT or obeject in dshboard and select use for Check Point communiation?

And what port should I allow from Internet? TCP/443 only?

Do I need to deploy agent again on Roaming client in that case? so that agents outside office will be able to communicate with Public IP?

Can someone please advise?

Re: Endpoint Management Server Static NAT address

Don_Paterson — Mon, 11 Mar 2024 07:48:43 GMT

Did you review the admin guides and search support center for self service advice?

https://support.checkpoint.com/results/sk/sk112099

https://sc1.checkpoint.com/documents/R81.20/SmartEndpoint_OLH/EN/Content/Topics-EPSG-R81.20/Connection-Port-to-Services-on-Endpoint-SecMmgt-Server.htm

https://sc1.checkpoint.com/documents/R81.20/SmartEndpoint_OLH/EN/Content/Topics-EPSG-R81.20/Intro-to-Endpoint_Security.htm