Are you a member of CheckMates?
×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Hello together
Can me somebody please explain what are the different between the Seetings for a Example like DMZ
1. what is the differents when i use in the Topology Seetings Overwrite => IP Adressess behind this Interface, (Mean it more than one Subnet as well all Subnet behind this Interface include Routing Tabel.
And Interface leads to to DMZ
And creating a own Zoe who is called DMZ ?
Best regards
Alexander
With anti spoofing enabled, Firewall will only accept packets from the networks defined under „Leads to“
Usually this is Most Common on DMZ interfaces, where i.e. Routing to / from mpls Takes Place or so.
Zones do Not have to be Used but if you want to define a Zone Based Policy.. 
with this you categorize / Group These networks. Checkpoint builds then an object you can use in your policy.
Then you are able to allow connections from “any internal network” to ... wherever
Hope that helped
