topic Re: SMB 1575 blades greyed out in Firewall and Security Management

SMB 1575 blades greyed out

Moudar — Tue, 04 Jun 2024 10:54:31 GMT

I got this new 1575 appliance and now with 30 days license, all blades are greyed out except for firewall blade.

The appliance has been successfully added to Smart Management Server (SMS) using a dynamic IP address.

Our goal is to configure this appliance to function solely as a VPN Gateway. This means all traffic will be routed through a VPN tunnel to a central office where it will be subjected to policy enforcement.

Can you please advise on how to implement this setup?"

Re: SMB 1575 blades greyed out

PhoneBoy — Thu, 06 Jun 2024 01:12:18 GMT

Is the 1575 managed by the SMS or has been added as an external object?
If centrally managed, all of the configuration is done there: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SitetoSiteVPN_AdminGuide/Content/Topics-VPNSG/Getting-Started.htm?Highlight=route%20all%20traffic
If locally managed, then you will also need to perform configurations here: https://sc1.checkpoint.com/documents/SMB_R81.10.X/AdminGuides_Locally_Managed/EN/Content/Topics/Configuring-Site-to-Site-VPN-Blade.htm
"Route all traffic" is a supported configuration in either case.

Re: SMB 1575 blades greyed out

Moudar — Fri, 07 Jun 2024 04:53:31 GMT

1575 is managed by the SMS (centrally managed).

If the central office has more blades enabled than the branch office, and we need to use the 'Star community – To center or through the center to other satellites, to Internet and other VPN targets' option, how can we install the same policy rule? Do we need to create a new policy specifically for the branch office?

Or maybe we don't need to install the same policy on branch office? Only 2-3 rules to send the traffic through the VPN?!

Re: SMB 1575 blades greyed out

the_rock — Fri, 07 Jun 2024 06:03:48 GMT

That would explain blades "behavior". As far as rules, you can apply same policy, should not be an issue.

Re: SMB 1575 blades greyed out

PhoneBoy — Fri, 07 Jun 2024 20:44:22 GMT

You'll probably want to install a different policy package on the branch office with just the rules you need.