topic Re: Unable to activate firewall blade in API / CLI Discussion

Unable to activate firewall blade

ravikush11 — Tue, 06 Aug 2019 13:28:05 GMT

Hi everyone,

I have installed an evaluation version of Al-in-one R80.10 Checkpoint Firewall in a VM.

While opening the WebGUI, I can see the Firewall blade is greyed out.

I tried to create firewall policy from Gaia CLI using the following commands:

> mgmt add access-rule layer "Network" name "Rule1" service "Any" position 1 action "Accept" install-on "Policy Targets"

> mgmt publish

But, still traffic is getting dropped by the Default Cleanup rule (which got installed during initial configuration time I think).

The output of "cpstat fw" command also shows only the Initial Policy and not the new rule created,

In out setup, I have to install/configure everything using Gaia CLI only.

Can anyone suggest what I need to do to get it working?

Thanks in advance.

Re: Unable to activate firewall blade

PhoneBoy — Tue, 06 Aug 2019 15:29:25 GMT

Creating the rule and publishing it is not enough to activate it in the Security Gateway.
You must install the policy to the gateway with something like mgmt_cli install-policy policy-package "Standard" targets "gateway"

Re: Unable to activate firewall blade

Wolfgang — Tue, 06 Aug 2019 18:41:10 GMT

Ravikush11,

you can‘t create a rulebase via GAiA webUI. You have to use Smartconsole application to create you’re rulebase.

please have look at Check Point 4 beginners to better understand how it works.

Wolfgang