1
Download Configuring the - Check Point Software Technologies, Ltd.
Transcript
Resolving Internal Names with the SecuRemote DNS Server Resolving Internal Names with the SecuRemote DNS Server The Problem The SecuRemote/SecureClient must resolve the names of internal hosts (behind the security gateway) with non-unique IP addresses using an internal DNS server. The Solution The simplest solution is to use Connect Mode and Office Mode. Otherwise, use the split DNS feature by defining a SecuRemote DNS Server. The SecuRemote DNS Server is an object that represents an internal DNS server that can be used to resolve internal names with unregistered, (RFC 1981-style) IP addresses. It is best to encrypt the DNS resolution of these internal names. Not all DNS traffic should be encrypted, as this would mean that every DNS resolution would require authentication. Configuring the SecuRemote DNS Server 1. Create a new SecuRemote DNS Server from the Objects Tree (Figure 27-2). Figure 27-2 Create a SecuRemote DNS Server 2. In the SecuRemote DNS Properties window 592 • General tab — Configure the general settings of the SecuRemote DNS Server as well as the host on which the SecuRemote DNS Server. • Domains tab — Add new domains or edit and remove existing domains.
