topic Re: Bypass(Fail-open) Question in Firewall and Security Management

Bypass(Fail-open) Question

joon — Wed, 02 Oct 2024 06:05:59 GMT

The company is using the bypass module in the firewall.
The conditions to be bypassed are as follows.
There is a power loss.
The appliance is rebooting.
The appliance is overloaded. It enters Bypass Mode for at least 1 minute.
There is a system failure. It enters Bypass Mode for at least 5 minutes.
The appliance stops responding for 60 seconds.

As far as I know, bypass is automatically switched due to the above phenomenon.
The question I want to ask is
Is it possible to automatically switch to normal mode when bypassed?
Bypass --> Nomal Mode What should I do to switch to normal mode?

Re: Bypass(Fail-open) Question

Chris_Atkinson — Wed, 02 Oct 2024 06:34:30 GMT

Which appliance model and interface card is used?

Please refer: sk85560 & sk87621

Re: Bypass(Fail-open) Question

joon — Wed, 02 Oct 2024 08:17:47 GMT

Quantum GW 6400 Platform in use..

Normalization does not return to its original state after switching to bypass mode.
os is the r81 version.
Is there a version issue or a hotfix issue?

Re: Bypass(Fail-open) Question

Chris_Atkinson — Wed, 02 Oct 2024 10:51:00 GMT

What was the trigger for going into bypass and how did you check that it was resolved or is it the same regardless of different tests/triggers that you try?

Note R81 base will be EOL at months end so that's definitely something to be aware of.

Might require a tac case https://help.checkpoint.com