Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Here's the situation:

My org has a Check Point firewall. I can only connect to it using Windows, despite making attempts with Openswan. Is there a way I can use the Windows box to VPN into my org and then use the Windows box to NAT other local workstations into the remote network? It seems like I might be able to but I'd like to know that for sure from a networking expert before I run down another rabbit hole. :-)

Thanks in advance!

share|improve this question

Sounds like you could probably just enable Internet Connection Sharing on your XP or Vista client ... the situation isn't much different from using one PC to share an internet connection. Check out MSDN's info on NAT with ICS for more info.

Somewhat more complex is setting up XP routing (which internally might actually be the same thing as ICS). I did this a few years ago when we were using OpenVPN internally, and followed these instructions.

share|improve this answer

I have never done it, but I have seen people setup a "gateway" windows box that has the checkpoint client installed, and then have that windows "Gateway" setup to do port forwarding of all their specifically desired ports (22, 21, 3389) to that remote network. Looks like this site has a nice tutorial on it

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.