topic Re: On premise Datacenter objects within smart 1 cloud in Firewall and Security Management

On premise Datacenter objects within smart 1 cloud

bigzell — Tue, 28 Apr 2026 14:00:06 GMT

Hi,

We're using Smart-1 Cloud and trying to add our on-premise Proxmox VE hosts as datacenter objects. Every time we attempt to add them, the connection just times out.

The Proxmox API is working as expected. We've checked our traffic logs and can't see any traffic or connection attempts reaching the hosts at all.

How would Smart-1 Cloud even reach on-premise hosts? Is there a proxy through the on-prem gateway that needs to be configured, or is this not supported for hosts that aren't publicly reachable?

Re: On premise Datacenter objects within smart 1 cloud

Wolfgang — Tue, 28 Apr 2026 19:46:09 GMT

I believe that‘s not possible. The only proxy solution I know is the integration with an on premise Active Directory via the AD-proxy feature of a gateway. See How to Connect a Local Active Directory to Smart-1 Cloud

Re: On premise Datacenter objects within smart 1 cloud

PhoneBoy — Wed, 29 Apr 2026 21:44:40 GMT

I have a feeling this isn't supported, though I can't find any documentation to back that up.
Suggest checking with TAC.

Re: On premise Datacenter objects within smart 1 cloud

Hugo_vd_Kooij — Thu, 30 Apr 2026 08:56:37 GMT

That connection must work directly from the Management system to the Proxmox system.

I have configured it locally and it works.

But in your case you have to setup NAT/ACL to allow the cloud to reach your proxmox server(s). Then configure it on the public IP addresses and I expect it will work.

Re: On premise Datacenter objects within smart 1 cloud

Tomer_Noy — Thu, 30 Apr 2026 15:53:14 GMT

This is a similar use case to customers who export logs to an on-prem SIEM.

You would need to open a rule in your FW to allow Smart-1 Cloud to reach your on-prem environment. The following SK shows how to do that:
https://support.checkpoint.com/results/sk/sk182699

You can do it with FQDNs, or even use a dedicated Updatable Object that represents Smart-1 Cloud egress IPs.