User's Manual Part 1

Configuring High Availability
132 Check Point Safe@Office User Guide
Note: The Safe@Office appliance supports Proxy ARP (Address Resolution
Protocol). When an external source attempts to communicate with such a
computer, the Safe@Office appliance automatically replies to ARP queries with its
own MAC address, thereby enabling communication. As a result, the Static NAT
Internet IP addresses appear to external sources to be real computers connected to
the WAN interface.
• Assign the network object's IP address to a MAC address
Normally, the Safe@Office DHCP server consistently assigns the same IP
address to a specific computer. However, if the Safe@Office DHCP server runs
out of IP addresses and the computer is down, then the DHCP server may
reassign the IP address to a different computer.
If you want to guarantee that a particular computer's IP address remains
constant, you can reserve the IP address for use by the computer's MAC address
only. This is called DHCP reservation, and it is useful if you are hosting a
public Internet server on your network.
• Secure HotSpot enforcement
In Safe@Office 500 with Power Pack, you can specify whether or not to exclude
the network object from HotSpot enforcement. Excluded network objects will be
able to access the network without viewing the My HotSpot page. For further
information on Secure HotSpot, see Configuring Secure HotSpot on page 258.
Adding and Editing Network Objects
You can add or edit network objects via:
• The Network Objects page
This page enables you to add both individual computers and networks.
• The Active Computers page
This page enables you to add only individual computers as network objects. The
computer's details are filled in automatically in the wizard.