topic Re: 3600 appliance R81.10 standalone in Firewall and Security Management

3600 appliance R81.10 standalone

sfung — Fri, 08 Jul 2022 21:17:39 GMT

Hello,

Does the 3600 appliance support the standalone deployment?

The 3600 comes with a SSD.

According to some Check Point documentation, standalone is NOT supported with appliances using SSD.

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RN/Topics-RN/Supported-Environments.htm?tocpath=Supported%20Environments%7C_____0#Standalone_(Gateway_+_Management)

Re: 3600 appliance R81.10 standalone

Chris_Atkinson — Mon, 11 Jul 2022 07:01:43 GMT

Yes for small deployments only.

The 3600/3800 Quantum Gateways have improved SSD compared with their earlier 2016 counterparts i.e. 3100/3200.

As I recall the previous 3100/3200 with SSD didn't include the license for standalone (local) management or at least had limitations around local logging for this reason.

Re: 3600 appliance R81.10 standalone

G_W_Albrecht — Mon, 11 Jul 2022 08:59:14 GMT

The 3000 Appliances page notes that 3100 / 3200 Appliances support Security Gateway and Standalone (Gateway + Management) deployment. So surely the 3600 also supports that.

But better do not try Standalone (Gateway + Management) deployment - this usually is not suggested for a stable firewall 8)

Re: 3600 appliance R81.10 standalone

sfung — Mon, 11 Jul 2022 18:19:32 GMT

Thank you all for the responses.

I used ISOmorphic to install the image to the appliance. I selected "Standalone" in ISOmorphic. After install, I got this error in First Time Configuration Wizard.

I will try again ..

Thanks,

Simon

Re: 3600 appliance R81.10 standalone

the_rock — Mon, 11 Jul 2022 19:16:33 GMT

The upgrade wizard shows image is there for R81.10 for 3600 appliance

Re: 3600 appliance R81.10 standalone

sfung — Mon, 11 Jul 2022 20:13:21 GMT

That is the same R81.10 image that I used ..

Here is where I specified standalone in ISOmorphic ...

Installation completed without any issue. Just that when I run the First Time Configuration Wizard, it gives me that error.

Thanks,

Simon

Re: 3600 appliance R81.10 standalone

the_rock — Mon, 11 Jul 2022 20:27:04 GMT

I would honestly verify with TAC. To me, logically looking at that error, does not say its not supported, just gives a message it cannot install management part. Seems to me you did check everything correctly.

Re: 3600 appliance R81.10 standalone

PhoneBoy — Mon, 11 Jul 2022 20:42:45 GMT

You might be able to get it to install by carefully editing /etc/appliance_config.xml prior to running the FTW.
The fact it's blocking this would need to be resolved via a TAC case as it should be supported on the 3600.

Re: 3600 appliance R81.10 standalone

sfung — Mon, 11 Jul 2022 20:54:07 GMT

I have a case opened last month and this was TAC's response ...

Now I have asked TAC to confirm again and here is TAC's response ...

I will reset the appliances to factory default and try the standalone install again.

Thanks,

Simon

Re: 3600 appliance R81.10 standalone

the_rock — Mon, 11 Jul 2022 21:51:38 GMT

You can certainly do so, but I have a gut feeling it may not do much...reason I say that is because all the config and file @PhoneBoy mentioned will be exactly the same. But, if that does not work, you can definitely modify the file and hopefully get it working.

Re: 3600 appliance R81.10 standalone

G_W_Albrecht — Tue, 12 Jul 2022 08:00:13 GMT

Each of the 3 standard SW packages for 3600s has NPM and LOGS Blades, and the 3600 is the successor of the 3100 - so this has to be supported...