topic Re: R80.10 Management and R77.30 Gateways in Bridge mode in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29949#M97862 <HTML><HEAD></HEAD><BODY><P>My Bad) Topology still can be defined for single FW, but as I've said, in cluster, bridge interface do not part of topology tab at all and it is External by design. (Security Gateway R77 Versions Technical Administration Guide)</P></BODY></HTML> Thu, 15 Feb 2018 22:57:54 GMT Mark_Gurevich 2018-02-15T22:57:54Z R80.10 Management and R77.30 Gateways in Bridge mode https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29943#M97856 <HTML><HEAD></HEAD><BODY><P>Looking to upgrade management from R77.30 to R80.10. In QA I'm getting validation errors for the firewalls in bridge mode which have no IP addresses on the fail-open interfaces (so 0.0.0.0/0.0.0.0). I don't have the ability to push from QA so I need to confirm if this is an issue installing policy? I cant seem to find any documentation on it.&nbsp;</P><P></P><P><IMG class="image-1 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/63065_pastedImage_1.png" style="width: auto; height: auto;" /></P></BODY></HTML> Wed, 14 Feb 2018 17:22:56 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29943#M97856 Taimoor_Muftee 2018-02-14T17:22:56Z Re: R80.10 Management and R77.30 Gateways in Bridge mode https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29944#M97857 <HTML><HEAD></HEAD><BODY><P>Those interfaces shouldn't have IPs on them for sure.</P><P>Which version of SmartConsole are you using?</P><P>Also, let me put this in <A href="https://community.checkpoint.com/community/management/policy-management?sr=search&amp;searchId=d0b7782c-e6b4-4eb3-8be3-d682416b981a&amp;searchIndex=0" target="_blank">https://community.checkpoint.com/community/management/policy-management?sr=search&amp;searchId=d0b7782c-e6b4-4eb3-8be3-d682416b981a&amp;searchIndex=0</A>‌.</P></BODY></HTML> Fri, 21 Jun 2019 09:16:31 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29944#M97857 PhoneBoy 2019-06-21T09:16:31Z Re: R80.10 Management and R77.30 Gateways in Bridge mode https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29945#M97858 <HTML><HEAD></HEAD><BODY><P>It's&nbsp;<SPAN style="color: #333333; background-color: #ffffff; font-size: 16px;">R80.10 SmartConsole Build 024</SPAN></P></BODY></HTML> Thu, 15 Feb 2018 12:50:16 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29945#M97858 Taimoor_Muftee 2018-02-15T12:50:16Z Re: R80.10 Management and R77.30 Gateways in Bridge mode https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29946#M97859 <HTML><HEAD></HEAD><BODY><P>Hi, for this kind of problems I really recommend that you open a support ticket, so that Check Point support will be able to identify the root cause and see how this problem cannot happen for other customers as well.</P></BODY></HTML> Thu, 15 Feb 2018 18:18:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29946#M97859 Tomer_Sole 2018-02-15T18:18:00Z Re: R80.10 Management and R77.30 Gateways in Bridge mode https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29947#M97860 <HTML><HEAD></HEAD><BODY><P>Hi, You have to make sure that bridge interfaces are not a part of topology tab in Dashboard.</P></BODY></HTML> Thu, 15 Feb 2018 21:32:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29947#M97860 Mark_Gurevich 2018-02-15T21:32:20Z Re: R80.10 Management and R77.30 Gateways in Bridge mode https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29948#M97861 <HTML><HEAD></HEAD><BODY><P>I believe you mean: not defining topology on the interface (i.e. not as internal or external).</P></BODY></HTML> Thu, 15 Feb 2018 22:47:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29948#M97861 PhoneBoy 2018-02-15T22:47:11Z Re: R80.10 Management and R77.30 Gateways in Bridge mode https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29949#M97862 <HTML><HEAD></HEAD><BODY><P>My Bad) Topology still can be defined for single FW, but as I've said, in cluster, bridge interface do not part of topology tab at all and it is External by design. (Security Gateway R77 Versions Technical Administration Guide)</P></BODY></HTML> Thu, 15 Feb 2018 22:57:54 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29949#M97862 Mark_Gurevich 2018-02-15T22:57:54Z Re: R80.10 Management and R77.30 Gateways in Bridge mode https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29950#M97863 <HTML><HEAD></HEAD><BODY><P>Having just installed a Mirror Port gateway on R80.10, the correct answer is: the mirror port should not be defined on the Gateway object at all.</P><P>When I fetched topology from my R80.10 Mirror Port gateway, the interface that was the mirror port did not even come across in the topology.</P><P>Further, your management Interface for the device should probably have the topology "Undefined" and Anti-Spoofing disabled.</P></BODY></HTML> Fri, 16 Feb 2018 03:53:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29950#M97863 PhoneBoy 2018-02-16T03:53:02Z Re: R80.10 Management and R77.30 Gateways in Bridge mode https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29951#M97864 <HTML><HEAD></HEAD><BODY><P>Hi Dameon, this is expected as mirror port is only for POC/testing and it will get all traffic (external + internal) from the corresponding mirror port of the switch. So bridge interface and mirror port, though might seem to be similar, are quite different.</P></BODY></HTML> Fri, 16 Feb 2018 08:46:12 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29951#M97864 Mark_Gurevich 2018-02-16T08:46:12Z Re: R80.10 Management and R77.30 Gateways in Bridge mode https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29952#M97865 <HTML><HEAD></HEAD><BODY><P>True, I misread <img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://community.checkpoint.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /></P><P>That said I wonder if a similar solution shouldn't apply.</P></BODY></HTML> Fri, 16 Feb 2018 16:56:19 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/R80-10-Management-and-R77-30-Gateways-in-Bridge-mode/m-p/29952#M97865 PhoneBoy 2018-02-16T16:56:19Z