topic Re: Can we configure MTA in bridge mode on Checkpoint TE appliance? in Firewall and Security Management

Can we configure MTA in bridge mode on Checkpoint TE appliance?

e0981039-2b24-4 — Thu, 13 Dec 2018 11:51:29 GMT

I have configured TE appliance in bridge mode. Threat emmulation is working fine but have a doubt if it supports MTA in bridge mode.Please help

Re: Can we configure MTA in bridge mode on Checkpoint TE appliance?

Thomas_Werner — Thu, 13 Dec 2018 14:22:11 GMT

You can but setup needs to be proper on the network layer:

You must configure two dedicated network interface with IP to be used by the MTA.

So emails will be routed completely through these two interfaces.

A network packet that is seen by one of those two interfaces must NEVER be seen on the bridge.

Otherwise it will implicitly be dropped because the same packet was seen twice (on MTA interface and on bridge) which is a security violation and leads to a packet drop.

Regards Thomas

Re: Can we configure MTA in bridge mode on Checkpoint TE appliance?

Gerard_Konan — Sat, 12 Sep 2020 14:06:56 GMT

Hello @Thomas_Werner,

I see that the question is related to TE Appliance. Is the solution applicable to a Security Gateway?

Regards

Re: Can we configure MTA in bridge mode on Checkpoint TE appliance?

PhoneBoy — Mon, 14 Sep 2020 04:16:08 GMT

Should still apply on a regular Security Gateway with the same restrictions.