topic Re: L2 ethernet link termination on firewall in General Topics

L2 ethernet link termination on firewall

Gaurav_Pandya — Wed, 25 Sep 2019 09:42:09 GMT

Hi,

We have checkpoint 5200 appliance running R80.20. Currently we are running on one ISP. Now we have taken another L2 ethernet link to connect between sites and we want to terminate it on checkpoint firewall. If i make one bridge interface and terminate L2 link, will it work? Anyone has any thoughts, how this will be achieved

Re: L2 ethernet link termination on firewall

_Val_ — Wed, 25 Sep 2019 09:56:46 GMT

Depends on specific topology. There is no problem to do L2 firewalling, but you need to keep networking decisions in mind

Re: L2 ethernet link termination on firewall

Alessandro_Marr — Wed, 25 Sep 2019 16:34:02 GMT

show us the topology...

Re: L2 ethernet link termination on firewall

PhoneBoy — Wed, 25 Sep 2019 17:15:18 GMT

Can you run Check Point in L2 mode? Yes.
One thing you need to be careful of is to make sure we don't see the same traffic twice.
This might happen if the traffic comes in/out via the bridge and then is routed through a Layer 3 interface.
This is so-called "double inspection" and will cause traffic to drop.