1
Download Configuring the - Check Point Software Technologies, Ltd.
Transcript
Selective Routing In this case, the remote hosts are granted access to part of the encryption domain. SecuRemote/SecureClient users will only be able to access servers within the encryption domain that is permitted to them. The users will be denied access to Server 2 and FileServer 2. Including External Resources in a Remote Access Encryption Domain Figure 16-3 Accessing External Resources In this scenario: • SecureClient users connect to gateway 1. • Gateway 1 has an encrypted domain that includes an external resource. • Gateway 1 offers the SecureClient users access to external resources such as the Internet in addition to the VPN domain. In the scenario depicted in Figure 16-3, an external resource is a part of the RA Encryption domain. Therefore, whenever the external resource is accessed by a remote host, the connection to that resource will be initiated by gateway 1. The gateway also has the ability to transfer traffic from the SecureClient users to servers on the DMZ. Chapter 16 SecuRemote/SecureClient 331
