[FW1] IP Pool NAT, Exceed for SecuRemote Users

[Jeff Newton <Jeff_Newton@FW1-NOSPAMpmc-sierra.com>]

I am using IP Pool NAT for SecuRemote connections.  Unfortunately,
users are having problems with Exceed.  Here is the problem:

1)  User REXECs to machine inside firewall specifying a display 
variable of the *real* ip address of the SecuRemote machine

2)  FW NATs the traffic using IP NAT Pool

3)  Internal machine launches an X11 app with display set to *real*
ip address of client

4)  Nothing is displayed on the SecuRemote client machine


If manually set the display variable to the IP NAT Pool address, the
X11 app displays fine.  Unfortunately, SecuRemote users are not going
to know the NAT'd address so they can't manually set the display
variable.

Is there a way around this problem?  Is there a way to force the FW
to NAT the real ip address both incoming and outgoing?

Cheers,

----
Jeff Newton




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================