Routing VPN traffic - in and out of firewall

[mfoc]

I plan to set up a site-to-site VPN this evening between our main office's internet router and our branch office's internet router. The plan is to have ALL traffice from the branch office come up through the VPN.

My questions is this:
If I route all traffic from the branch office to come up to our main office through the VPN (internet router), how do I get it to loop through our CheckPoint box before it goes back out? The CheckPoint obviously has a public address on our WAN network behind the internet router.

Is there some way to identify the source of the traffic as being from that VPN and route it to our CheckPoint?

 

[mfoc]

To follow up:

Can I route the VPN traffic to one of the Ethernet interfaces? This would be better, because I could then just plug that into a DMZ interface on the CheckPoint box.

 

[UnaBomber]

Well, yes it can be done.

You havent given anywhere near enough information regarding your setup for anyone to give you a solution. But what you want is possible. To identify your vpn traffic surely you just use the ip address of the lan at your branch office?

UnaBomber
ccnp mcse2k