NAT not able to access from internal network

[jcs001]

Hi,

I have a question about setting up NAT on checkpoint 450.

So after I used the wizard on "Active Devices", save as a machine to "server". I was able to connect to the server from external network. However, from within the network, I am unable to.

Here's some more of the settings I set:

Access - All Zones

NAT - Hide behind gateway.

Any pointers?

Thanks!

[PhoneBoy]

I assume you mean a 750, which is an SMB appliance.

In your server object, did you check the option under Advanced?

[jcs001]

Yes that was checked but still didn't work

[PhoneBoy]

Have you done a tcpdump to see what the traffic looks like?

I suspect you'll have to get the TAC involved.

[jcs001]

Hi,

I think i figured it out. I think there's a UI bug somewhere.

If you create your server node from the "active device" page, I believe the routes are configured differently when you create the server node from the actual server page. After multiple attempts, if I create the server object from the actual server page, it works. 

Bug?

[G_W_Albrecht]

How could you do that ? On my 730, Home > Monitoring > Active Devices has no option to add a server, and neither has Logs & Monitoring > Status > Active Devices ...

[PhoneBoy]

Right-click on the object in the Active Devices view, choose Save-As > Server.

[G_W_Albrecht]

I second that 😉

[G_W_Albrecht]

---

@PhoneBoy wrote:

Right-click on the object in the Active Devices view, choose Save-As > Server.

---

I see - i can not do that, also not from menue, as this is only possible for IPs without defined objects. Definitely a bug, this feature should make defining servers more handy but actually makes servers partly unusable...

[PhoneBoy]

It makes sense in some ways because in both cases, you are defining an object (one a host, another a server).
I suppose what would be a nice addition would be a way to convert from one to the other.

[PhoneBoy]

Possibly, and you should engage the TAC with this.

[G_W_Albrecht]

Do you have a response from TAC yet ?