Example Of Transparent Mode - Nokia IPSO 4.0 Reference Manual

Note
For information on how to create groups, objects, and rules on the firewall, see your Check
Point documentation that was included with your Nokia IPSO software package.

Example of Transparent Mode

The following illustration shows a network connected to an Internet service provider (ISP)
through a switch. In this configuration, all addressing to the local area network (LAN) is done at
Layer 2.
Below, the network administrator wants to protect the LAN with a firewall. Installing a
conventional firewall requires the network administrator to obtain another IP address from the
ISP, IP 1.5.4.0/24.
Nokia's transparent mode solution provides firewall protection for the LAN without having to
obtain new IP addresses or reconfigure addresses on the LAN. Packet traffic continues to run at
Layer 2, rather than at Layer 3 with a conventional firewall solution.
Nokia Network Voyager for IPSO 4.0 Reference Guide
ISP
Internet
1.5.2.1/24
1.5.3.2/24
ISP
Internet
1.5.3.2/24
ISP
Internet
Switch
1.5.3.3/24
1.5.3.2/24
Switch
1.5.4.0/24
Switch Switch
1.5.3.3/24
Switch
Nokia
Platform
with Firewall
LAN
00293
LAN
00294
1.5.3.4/24
LAN
00295
135