Possible to change DAIP update interval (GAIA R81.x)

Garrett_DirSec — Thu, 19 Oct 2023 19:00:03 GMT

Hello -- we are testing DAIP gateway functionality.

We are specifically testing embedded GAIA device (1500-series) running R81.10.08. However, this question should apply to Enterprise GAIA as well.

Per DAIP FAQ /#3

https://support.checkpoint.com/results/sk/sk167473

The update interval for gateway to update management server for WAN IP is FOUR HOURS.

Is this update internal something we can change on the gateway via permanent CLISH setting?

The checkpoint devices are at location behind existing consumer Internet service provider router/modem. If primary WAN internet communication fails, we fail over to cradlepoint.

We would like to know that Smart1-Cloud (MAAS) picks up the gateway DAIP IP change sooner vs later (and not wait upwards of four hours).

Thanks in adv.

Re: Possible to change DAIP update interval (GAIA R81.x)

PhoneBoy — Thu, 19 Oct 2023 21:23:26 GMT

While I'm not 100% certain, it seems that as long as traffic is coming from the gateway towards the management, the IP address will update correctly.
That's per: https://support.checkpoint.com/results/sk/sk119934

Since a MAAS tunnel will definitely go down if the upstream NAT IP changes, I assume it would also attempt to restart it right away.
Which means the management SHOULD know what the new IP address is...more or less right away.

As far as tuning options outside of that, I'm not sure.

topic Re: Possible to change DAIP update interval (GAIA R81.x) in Firewall and Security Management

Possible to change DAIP update interval (GAIA R81.x)

Re: Possible to change DAIP update interval (GAIA R81.x)