How do I NAT separate EPM server so that clients can connect over internet

[Blason_R]

Hi Team,

I have setup EPM R81 as a dedicated server while my perimeter firewalls are Check Point 6400 cluster with Magmt server. Now since I setup EPM server wondering how do I setup NAT so that clients connecting to EPM can connect over internet?

EPM server does not have a NAT option hence wondering what option should I apply? I do not have any Policy server.

TIA

Blason R

[Chris_Atkinson]

Manual, static where needed.

There is a white paper here that describes an approach including NAT.

https://community.checkpoint.com/t5/Endpoint/White-Paper-R80-20-Endpoint-Policy-Server-in-DMZ-for-Ex...

[Blason_R]

Agree and thanks for the paper - However is it mandatory that we need to have policy server to NAT the traffic? What if customer has not purchased a policy server license?

[Chris_Atkinson]

Not mandatory to my knowledge. Note that policy server licenses entitlements may already be covered depending on your EPM license, refer: sk61832

[Blason_R]

Surprisingly - I followed that and I am on R81. However I am not seeing NAT tab in smart console for my policy server. Is something changed in R81?

[Blason_R]

This is really weird. NAT Tab is not appearing in my smart console. Is this a  bug or anything that needs to be activated?