RE: [FW1] Authenticating to an NT domain through Checkpoint 4.1

["Reynolds, Tom" <Tom.Reynolds@FW1-NOSPAMpbhgfunds.com>]

Microsoft's NBT stuff doesn't work real well with NAT, in fact it is almost impossible to even set up an NT Trust through FW1 because MS includes the IP address of the PDC in the data portion of the packet, and Checkpoint won't/can't translate it.  (Although I have seen it work with Cisco Routers/PIX NAT)

 

Check out this link for more NT info.  Good luck.  http://www.phoneboy.com/fw1/nt.html

 

If you need to do this, try using a VPN and Secure Remote.

 

Tom Reynolds, MCSE, CCNA
_________________________
Pilgrim Baxter and Associates
Network Security and Engineering
825 Duportail Rd.
Wayne, Pennsylvania 19087-5525

Tom.Reynolds@PBHGFunds.com

-----Original Message-----
From: Hankins, Bill [mailto:bhankins@iphrase.com]
Sent: Thursday, October 19, 2000 5:38 PM
To: 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: [FW1] Authenticating to an NT domain through Checkpoint 4.1

Just wondering if anyone has had any success with this ??

 

Checkpoint Firewall 4.1 is NATing our private ip's to public ip's where our PDC sits.  Server is browseable via NETBIOS, request for authentication reach the PDC\WINS server, but no answer is ever sent.  Thank you for any help in advance..

 

Bill Hankins

Network Engineer

iPhrase Technologies