FireWall-1 FAQ: NetMeeting and NAT
Please note: This content was from when I was operating my FireWall-1 FAQ site, which I stopped operating in August 2005. For some reason people still have links to this stuff on the Internet that people are still clicking on.
I am making this information available again AS IS. Given how old this information is, it is likely wildly inaccurate. I have no plans to update this information.
If you're still running versions of Check Point VPN-1/FireWall-1 where this information is still relevant to you, do yourself a favor and upgrade to a more recent release. If you happen to be running a current release and the information is useful, it's by happenstance :)
Vicki Fletcher tells me this is possible if:
- You are using Static 1 to 1 NAT
- If the client OUTSIDE the Firewall uses the x-lated IP to connect, and does not merely doubleclick the Directory Entry (which tries to connect to the untranslated/private IP)
- Rules must explicitly list Netmeeting protocols (all are predefined for FireWall-1 4.0SP3)
These services may be pre-defined in 3.0 (Netmeeting requires H323 and ldap), but it looks as if H.323 has some additional inspect code in 4.0 that it does not have in 3.0, so you may need to upgrade to 4.0 in order to use this correctly.
Note that NetMeeting 3.0 is currently not supported.
