- Products
- Learn
- Local User Groups
- Partners
-
More
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
IDC Spotlight -
Uplevel The SOC
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Can someone explain?
I understand when a host "hide behind the GWY and hide behind the IP", but not the difference between the following config. Are they not the same?
Hide is used to "overload" single IP for outbound traffic.
Static is used for inbound connections to the servers you are hosting.
If you have a number of public IPs and you are hosting a server behind the gateway that the external clients must connect to, you use Static NAT.
I.e.: You have 222.222.222.0/24 public range, your gateway is 222.222.222.1, your internal network is 10.0.0.0/24 and your DMZ is 192.168.255.0/24.
You configure Web server in DMZ with IP of 192.168.255.2 and Statically NAT it to 222.222.222.2.
Your internal network 10.0.0.0/24 is Hiding behind gateway's IP of 222.222.222.1.
Inbound traffic to your web server will be translated to its private IP address 192.168.255.2.
ah, I got it. The first line in your response reminds me everything I've learned. Thank you!
Hide is used to "overload" a single external IP.
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY