Policy: Firewall-VPN Last Modified: Wed Oct 27 07:28:53 2004 Global Properties Installation Targets

Type	Name	IP Address	Properties		Comments
Host Node
	AquaNet_UK_DNS1	10.200.0.3	NAT NAT Values for Address Translation Add Automatic Address Translation rules DNS Server DNS Server Authorization domains list: (none) Protection Protected by: All Protections Protections SmartDefense Scramble source port and session id Drop inbound requests for external domains Note: Additional protections are configured globally from SmartDefense.	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:	AquaNet UK DNS 1
	AquaNet_UK_DNS2	10.200.1.3	NAT NAT Values for Address Translation Add Automatic Address Translation rules DNS Server DNS Server Authorization domains list: (none) Protection Protected by: All Protections Protections SmartDefense Scramble source port and session id Drop inbound requests for external domains Note: Additional protections are configured globally from SmartDefense.	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:	AquaNet UK DNS 2
	AquaNet_UK_ggsn1	10.200.1.1	NAT NAT Values for Address Translation Add Automatic Address Translation rules DNS Server DNS Server Authorization domains list: (none) Protection Protected by: All Protections Protections SmartDefense Scramble source port and session id Drop inbound requests for external domains Note: Additional protections are configured globally from SmartDefense.	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:	AquaNet UK ggsn 1
	AquaNet_UK_ggsn2	10.200.1.2	NAT NAT Values for Address Translation Add Automatic Address Translation rules DNS Server DNS Server Authorization domains list: (none) Protection Protected by: All Protections Protections SmartDefense Scramble source port and session id Drop inbound requests for external domains Note: Additional protections are configured globally from SmartDefense.	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:	AquaNet UK ggsn 2
	AquaNet_UK_sgsn1	10.200.0.1	NAT NAT Values for Address Translation Add Automatic Address Translation rules DNS Server DNS Server Authorization domains list: (none) Protection Protected by: All Protections Protections SmartDefense Scramble source port and session id Drop inbound requests for external domains Note: Additional protections are configured globally from SmartDefense.	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:	AquaNet UK sgsn 1
	AquaNet_UK_sgsn2	10.200.0.2	NAT NAT Values for Address Translation Add Automatic Address Translation rules DNS Server DNS Server Authorization domains list: (none) Protection Protected by: All Protections Protections SmartDefense Scramble source port and session id Drop inbound requests for external domains Note: Additional protections are configured globally from SmartDefense.	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:	AquaNet UK sgsn 2
	CitrixSTAServer	123.12.11.4	NAT NAT Values for Address Translation Add Automatic Address Translation rules	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:
	CitrixWI	123.12.11.3	NAT NAT Values for Address Translation Add Automatic Address Translation rules Web Server Web Server Operating System: Application Engines: PHP JET ODBC SQL Server ASPX ASP Oracle General Perl Ports configurations Server uses Standard Port: 80 Server uses additional ports: Protection Protected by: All Protections Protections Web Intelligence HTTP Malicious Code Protector Low Cross Site Scripting Low LDAP Injection Medium SQL Injection Medium Command Injection Medium Directory Traversal Header Spoofing Non Ascii Headers HTTP Methods HTTP Methods HTTP Methods Configure the protection data: Block default HTTP methods: Block standard Safe HTTP methods Block standard Unsafe HTTP methods Block WebDAV HTTP methods Block selected HTTP methods (configured globally from Web Intelligence). Note: Additional protections are configured globally from Web Intelligence	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:
	Corporate-dns-ext	172.16.2.4	NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Hide Hide behind Gateway Hide behind IP Address 143.100.75.4 Install on Gateway: All Apply for VPN-1 Pro/Express control connections DNS Server DNS Server Authorization domains list: (none) Protection Protected by: All Protections Protections SmartDefense Scramble source port and session id Drop inbound requests for external domains Note: Additional protections are configured globally from SmartDefense.	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:	Corporate DNS External Server
	Corporate-dns-int	172.16.1.4	NAT NAT Values for Address Translation Add Automatic Address Translation rules DNS Server DNS Server Authorization domains list: (none) Protection Protected by: All Protections Protections SmartDefense Scramble source port and session id Drop inbound requests for external domains Note: Additional protections are configured globally from SmartDefense.	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:	Corporate DNS Internal Server
	Corporate-mail-server	172.16.2.2	NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Static Translate to IP address: 143.100.75.2 Install on Gateway: All Apply for VPN-1 Pro/Express control connections Mail Server Mail Server User verification Verify username with VPN tunnel user Drop connections upon verification failure Track failed connections: Log Servers/Ports configuration POP3 Server port: 110 IMAP Server port: 143 Logging Log POP3/IMAP username Protections Protections SmartDefense Note: The enforcement of the settings on this page is dependant on the profile that protects this server. POP3/IMAP Security	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:	Corporate Mail Server
	FileServer	222.33.1.1	NAT NAT Values for Address Translation Add Automatic Address Translation rules	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:
	IMAPServer	123.12.11.1	NAT NAT Values for Address Translation Add Automatic Address Translation rules Mail Server Mail Server Operating System: Other User verification Verify username with VPN tunnel user Drop connections upon verification failure Track failed connections: Log Servers/Ports configuration POP3 Server Port: 110 IMAP Server Port: 143 SMTP Server Port: 25 Logging Log POP3/IMAP username Protections Protections SmartDefense Note: The enforcement of the settings on this page is dependant on the profile that protects this server. POP3/IMAP Security	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:
	SMTPServer	123.12.11.2	NAT NAT Values for Address Translation Add Automatic Address Translation rules Mail Server Mail Server Operating System: Other User verification Verify username with VPN tunnel user Drop connections upon verification failure Track failed connections: Log Servers/Ports configuration POP3 Server Port: 110 IMAP Server Port: 143 SMTP Server Port: 25 Logging Log POP3/IMAP username Protections Protections SmartDefense Note: The enforcement of the settings on this page is dependant on the profile that protects this server. POP3/IMAP Security	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:
	Tech-Support	210.155.35.2	NAT NAT Values for Address Translation Add Automatic Address Translation rules	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:	Web Application Tech Support (Temporary)
	WebCalendarServer	234.44.22.3	NAT NAT Values for Address Translation Add Automatic Address Translation rules	Advanced Advanced SNMP sysName: sysLocation: sysContact: sysDescription:

Name	IP Address	Netmask	Properties	Comment
AquaNet_China_gsn1	10.90.5.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules	AquaNet China GSN 1
AquaNet_China_gsn2	10.90.6.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules	AquaNet China GSN 2
AquaNet_Germany_gsn1	10.85.5.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules	AquaNet Germany GSN 1
AquaNet_Germany_gsn2	10.85.6.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules	AquaNet Germany GSN 2
AquaNet_Netherlands_gsn1	10.70.5.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules	AquaNet Netherlands GSN 1
AquaNet_Netherlands_gsn2	10.70.6.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules	AquaNet Netherlands GSN 2
Corporate-Cluster-1-dmz	172.16.5.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules
Corporate-Cluster-1-external	143.100.76.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules
Corporate-Cluster-1-internal	10.0.0.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules
Corporate-dmz-net	172.16.2.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules	Corporate DMZ Network
Corporate-finance-net	10.1.0.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Hide Hide behind Gateway Hide behind IP Address Install on Gateway: Corporate-gw Apply for VPN-1 Pro/Express control connections	Corporate Finance Network
Corporate-hr-net	10.2.0.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Hide Hide behind Gateway Hide behind IP Address Install on Gateway: Corporate-gw Apply for VPN-1 Pro/Express control connections	Corporate Human Resources Network
Corporate-internal-net	172.16.1.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Hide Hide behind Gateway Hide behind IP Address Install on Gateway: Corporate-gw Apply for VPN-1 Pro/Express control connections	Corporate Internal Network
Corporate-rnd-net	10.3.0.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Hide Hide behind Gateway Hide behind IP Address Install on Gateway: Corporate-gw Apply for VPN-1 Pro/Express control connections	Corporate R&D Network
CP_default_Office_Mode_addresses_pool	172.16.10.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Hide Hide behind Gateway Hide behind IP Address Install on Gateway: All Apply for VPN-1 Pro/Express control connections
Remote-1-dmz	192.168.2.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules	Remote 1 DMZ Network
Remote-1-internal	192.168.1.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Hide Hide behind Gateway Hide behind IP Address Install on Gateway: Remote-1-gw Apply for VPN-1 Pro/Express control connections	Remote 1 Internal Network
Remote-2-internal	10.0.2.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Hide Hide behind Gateway Hide behind IP Address Install on Gateway: Remote-2-gw Apply for VPN-1 Pro/Express control connections	Remote 2 Internal Network
Remote-3-internal	10.0.3.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Hide Hide behind Gateway Hide behind IP Address Install on Gateway: Remote-3-gw Apply for VPN-1 Pro/Express control connections	Remote 3 Internal Network
Remote-4-internal	10.0.4.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Hide Hide behind Gateway Hide behind IP Address Install on Gateway: Remote-4-gw Apply for VPN-1 Pro/Express control connections	Remote 4 Internal Network
Remote-5-internal	10.0.5.0	255.255.255.0	General General Broadcast address: Included Not included NAT NAT Values for Address Translation Add Automatic Address Translation rules Translation method: Hide Hide behind Gateway Hide behind IP Address Install on Gateway: Remote-5-gw Apply for VPN-1 Pro/Express control connections	Remote 5 Internal Network

Type	Name	Members	Exclusion	Comment
Simple Group
	AquaNet_DNS_group	AquaNet_UK_DNS1 AquaNet_UK_DNS2		AquaNet UK DNS group
	GW-group	Corporate-gw Remote-1-gw Remote-2-gw Remote-3-gw Remote-4-gw Remote-5-gw		All Gateways
	Internal-net-group	Corporate-internal-net Remote-1-internal Remote-2-internal Remote-3-internal Remote-4-internal Remote-5-internal		Corporate and Remote Internal Networks
	Partners_gsn	AquaNet_China_gsn_ho AquaNet_Germany_gsn_ho AquaNet_Netherlands_gsn_ho		All partners GSN Handover
GSN Handover Group
	AquaNet_China_gsn_ho	AquaNet_China_gsn1 AquaNet_China_gsn2		AquaNet China GSN Handover
	AquaNet_Germany_gsn_ho	AquaNet_Germany_gsn1 AquaNet_Germany_gsn2		AquaNet Germany GSN HAndover
	AquaNet_Netherlands_gsn_ho	AquaNet_Netherlands_gsn1 AquaNet_Netherlands_gsn2		AquaNet Netherlands GSN Handover
	AquaNet_UK_ggsn_ho	AquaNet_UK_ggsn1 AquaNet_UK_ggsn2		AquaNet UK ggsn Handover
	AquaNet_UK_sgsn_ho	AquaNet_UK_sgsn1 AquaNet_UK_sgsn2		AquaNet UK sgsn Handover
	vbn

Name	First IP	Last IP	Properties	Comments
DAG_range	0.0.0.1	0.0.254.254	NAT NAT Values for Address Translation Add Automatic Address Translation rules
OfficeNetwork	140.12.11.1	140.12.11.127	NAT NAT Values for Address Translation Add Automatic Address Translation rules

Name	Comments
AuxiliaryNet
CPDShield	DSHIELD IP blocklist
DMZNet
InternalNet
LocalMachine	Check Point Local Machine (Dynamic Interfaces)
LocalMachine_All_Interfaces	Check Point Local Machine (All Interfaces)