topic Re: Wake gateway using Wake on LAN in Firewall and Security Management

Wake gateway using Wake on LAN

oa_munich — Fri, 11 Apr 2025 09:56:09 GMT

Hello all,

I tried to search for this, but was unable to find anything suitable.

Is it possible to wake a gateway using Wake on LAN (for disaster recovery automation)? I've tried sending WoL packages to all interfaces without any luck. Any chance I missed something and this could be done?

Re: Wake gateway using Wake on LAN

Chris_Atkinson — Fri, 11 Apr 2025 14:51:35 GMT

Don't believe so. Most likely this would be an RFE.

Re: Wake gateway using Wake on LAN

the_rock — Sat, 12 Apr 2025 02:17:21 GMT

I "ran" your question though few AI engines and they more less gave the same answer. Below is one from CP AI copilot.

Andy

**********************

Yes, it is possible to wake a gateway using Wake on LAN (WOL) for disaster recovery automation. However, there are some important considerations to keep in mind:

Same Subnet Limitation: On SMB appliances, the Wake on LAN application or script can only broadcast "wake on lan" Magic Packets within one local subnet. Broadcast between different subnets is not supported. This means that both the device sending the WOL packet and the gateway must be on the same subnet.
Configuration: You need to configure the gateway to allow Temporary Pre-boot Bypass (Wake on LAN) settings. This involves selecting the type of Temporary Pre-boot Bypass to allow and configuring when the selected type of Temporary Pre-boot Bypass occurs (By Demand, Once, or Weekly).
Security Considerations: Ensure that the WOL feature is used securely and that the network is protected to prevent unauthorized wake-up attempts.

Here is a brief overview of the steps to configure Temporary Pre-boot Bypass (Wake on LAN):

Enable Pre-boot Authentication: Password Synchronization only works if Pre-boot authentication is enabled.
Configure Temporary Pre-boot Bypass:
- Click Temporary Pre-boot Bypass (Wake on LAN) settings.
- Select the type of Temporary Pre-boot Bypass to allow (e.g., Allow Temporary Pre-boot Bypass (Wake On LAN)).
- Configure when the selected type of Temporary Pre-boot Bypass occurs (By Demand, Once, or Weekly).
- Select the date and time.
- In Temporary Pre-boot Bypass duration, select when Temporary Pre-boot Bypass functionality becomes disabled (e.g., Disable after X automatic logons or Disable after X days or hours).
Save Configuration: Click OK to save the configuration.

Note: If the mouse is moved or a key is pushed on the keyboard in the Pre-boot environment, the Temporary Pre-boot Bypass functionality is disabled.

For more detailed instructions, you can refer to the relevant Check Point documentation or contact Check Point Support.

Re: Wake gateway using Wake on LAN

D_W — Sat, 12 Apr 2025 04:34:50 GMT

If the device has no LOM then You can try to power cycle it with a „smart home“/remote controlled power outlet.

Re: Wake gateway using Wake on LAN

oa_munich — Sat, 12 Apr 2025 06:30:10 GMT

Unfortunately power-cycling on the PDU doesn't help, at least on 6400 with redundant power, it just waits for power to be toggled by the power switch at the back.

Got the point on the LOM, but that's something requiring a user interaction.

Thanks for confirming my findings.

Re: Wake gateway using Wake on LAN

_Val_ — Mon, 14 Apr 2025 08:11:27 GMT

@oa_munich As other people already told you, this is not something that we currently support. What is your specific use case? Do you want to force GW to reboot? Or do you want to start a power-on cycle for your cold appliances? Can you please elaborate?

Re: Wake gateway using Wake on LAN

G_W_Albrecht — Mon, 14 Apr 2025 08:30:28 GMT

This is pure hallucinations - second part is taken from sk104419: Temporary Pre-boot Bypass from a script for Endpoint Security Clients running under windows. WOL is not supported by CP at all !

I do not understand why you keep posting such nonsense like above - did you not verify the content ?

Re: Wake gateway using Wake on LAN

_Val_ — Mon, 14 Apr 2025 08:35:05 GMT

Second this question. AI replies should always be verified, before sharing.

Re: Wake gateway using Wake on LAN

_Val_ — Mon, 14 Apr 2025 08:35:42 GMT

Sorry to say, but this is absolutely incorrect and useless, @the_rock

Re: Wake gateway using Wake on LAN

oa_munich — Mon, 14 Apr 2025 08:43:26 GMT

We have a subset of the data center on cold standby at another site. We power it up and down regularly to sync, and it would power up automatically in case of an actual disaster event. So far, the gateway is the only thing we can power down, but cannot power up remotely. I'll be keeping it up, I was just wondering if there was an option.

Re: Wake gateway using Wake on LAN

the_rock — Mon, 14 Apr 2025 10:59:13 GMT

I would agree with that : - )

Andy

Re: Wake gateway using Wake on LAN

the_rock — Mon, 14 Apr 2025 10:59:26 GMT

K, fair enough : - )