User guide

Configuring Network Settings
214 Check Point Safe@Office User Guide
Note: The DMZ network must not overlap other networks.
11. In the Subnet Mask drop-down list, select the DMZ’s internal network range.
12. If desired, enable or disable Hide NAT.
See Enabling/Disabling Hide NAT on page 199.
13. If desired, configure a DHCP server.
See Configuring a DHCP Server on page 200.
14. Click Apply.
A warning message appears.
15. Click OK.
A success message appears.
Configuring the OfficeMode Network
By default, VPN Clients connect to the VPN Server using an Internet IP address locally
assigned by an ISP. This may lead to the following problems:
• VPN Clients on the same network will be unable to communicate with each
other via the Safe@Office Internal VPN Server. This is because their IP
addresses are on the same subnet, and they therefore attempt to communicate
directly over the local network, instead of through the secure VPN link.
• Some networking protocols or resources may require the client’s IP address to
be an internal one.
OfficeMode solves these problems by enabling the Safe@Office DHCP Server to
automatically assign a unique local IP address to the VPN client, when the client connects
and authenticates. The IP addresses are allocated from a pool called the OfficeMode
network.