Threat prevention on NSX-T

Ryan_Ryan — Tue, 14 May 2024 02:31:45 GMT

We use NSX-T and have service insertion checkpoint firewalls, we also have Checkpoint firewalls running in Azure cloud.

When we push TP policy we get an error -

- Threat Prevention requires topology to be defined.
At least one internal, one external, and no undefined interfaces are required.
Incorrectly defined topology impacts performance and security.
Please install both Access Control and Threat Prevention policies after fixing the topology

These firewalls are layer2/bump in the wire firewalls, they have only one nic for management, is this error just cosmetic or is TP really not going to work? I do see some IPS events detected on these gateways, but have never seen an Antivirus event or any other TP event logged.

Re: Threat prevention on NSX-T

Chris_Atkinson — Tue, 14 May 2024 08:55:50 GMT

This warning is expected in some cloud environments / use cases such as NSX-T and can be ignored.

topic Re: Threat prevention on NSX-T in Cloud Firewall

Threat prevention on NSX-T

Re: Threat prevention on NSX-T