topic TE1000 appliance needs install policy in General Topics

TE1000 appliance needs install policy

Baasanjargal_Ts — Mon, 21 Dec 2020 04:35:41 GMT

Hello.

TE1000 appliance is deployed on the Check Point NGTX firewall environment. In this case, Do we need to create a separate access control policy for TE1000 appliance. Do TE1000 need any install policy?

Re: TE1000 appliance needs install policy

PhoneBoy — Mon, 21 Dec 2020 04:52:36 GMT

Generally, yes.

Re: TE1000 appliance needs install policy

Baasanjargal_Ts — Mon, 21 Dec 2020 05:00:00 GMT

That is my TE_Policy rule. It has just one rule Any to Any Accept. Installation target is just TE1000x appliance. How about that; Does it look correct.?

Re: TE1000 appliance needs install policy

PhoneBoy — Mon, 21 Dec 2020 06:27:39 GMT

Probably safer to configure a rule to allow https and ssh to the gateway and drop everything else, unless it’s an ICAP proxy.

Re: TE1000 appliance needs install policy

Baasanjargal_Ts — Mon, 21 Dec 2020 06:36:07 GMT

Yeah, You mean just allow https and ssh between TE1000 and Gateway? We want to emulate HTTP, SMTP traffic too. How about in that case.?

Also, I am wondering do local hosts need to connect TE1000 appliance.? As I understand TE1000 can connect to NGTX gateway and Smart-1 management server network is enough, or not?