User Manual Part 1
Table Of Contents
- Check Point Safe@Office User Guide 8.0
- Copyright & Trademarks
- Contents
- About This Guide
- Introduction
- About Your Check Point Safe@Office Appliance
- Safe@Office 500 Product Family
- Product Features
- Wireless Features
- Optional Security Services
- Software Requirements
- Getting to Know Your Safe@Office 500 Appliance
- Getting to Know Your Safe@Office 500W Appliance
- Getting to Know Your Safe@Office 500 ADSL Appliance
- Getting to Know Your Safe@Office 500W ADSL Appliance
- Contacting Technical Support
- Safe@Office Security
- Installing and Setting Up Safe@Office
- Getting Started
- Configuring the Internet Connection
- Managing Your Network
- Using Bridges
- Configuring High Availability
- Using Traffic Shaper
- Working with Wireless Networks
- Viewing Reports
- Viewing Logs
- Setting Your Security Policy
Overview
220 Check Point Safe@Office User Guide
• Transparent roaming
In a routed network, if a host is physically moved from one network area to another,
then the host must be configured with a new IP address. However, in a bridged
network, there is no need to reconfigure the host, and work can continue with minimal
interruption.
The Safe@Office appliance allows you to configure anti-spoofing for bridged network
segments. When anti-spoofing is configured for a segment, only IP addresses within a
specific IP address range can be sent from that network segment. For example, if you
configure anti-spoofing for the “Marketing” network segment, the following things
happens:
• If a host with an IP address outside of the allowed IP address range tries to
connect from a port or VLAN that belongs to the “Marketing” network segment,
the connection will be blocked and logged as “Spoofed IP”.
• If a host with an IP address within the bridge IP address range tries to connect
from a port or VLAN that belongs to a network segment other than the
“Marketing” segment, the connection will be blocked and logged as “Spoofed
IP”.
Note: The following Safe@Office models do not support using bridge mode with port-
based VLAN:
• SBX166-LHGE-2
• SBX166-LHGE-3
Note: If the Safe@Office 500 Power Pack upgrade is not installed, you can configure
only one bridge.