Endpoint Management Server Static NAT address

[Don_Paterson]

How does the Harmony Endpoint client deal with communications to the on-prem. EPMS when it is Statically NAT'd?

I see that in the config.dat (in the MSI (initial client installer)) that the EPMS is referenced using both IP addresses (in <server>) and the same Cert but the question is how does the client choose the IP address.

Obviously it can send to both IP addresses and wait for responses but is there more to it, like priority or location awareness?

Thanks,

Don

[PhoneBoy]

I believe it is "first to respond."
I recall this behavior can be configured, but am having trouble locating the precise documentation for this.

[Blason_R]

Hi Team,

Pertaining to this - How the EPM server should be natted then? A simple Static NAT or obeject in dshboard and select use for Check Point communiation?

And what port should I allow from Internet? TCP/443 only?

Do I need to deploy agent again on Roaming client in that case? so that agents outside office will be able to communicate with Public IP?

Can someone please advise?

[Don_Paterson]

Did you review the admin guides and search support center for self service advice?

https://support.checkpoint.com/results/sk/sk112099

https://sc1.checkpoint.com/documents/R81.20/SmartEndpoint_OLH/EN/Content/Topics-EPSG-R81.20/Connecti...

https://sc1.checkpoint.com/documents/R81.20/SmartEndpoint_OLH/EN/Content/Topics-EPSG-R81.20/Intro-to...