topic Re: Disable gateway monitoring in General Topics

Disable gateway monitoring

Nik_Bloemers — Tue, 26 May 2020 07:18:59 GMT

Hello CheckMates,

Is there a way to disable monitoring for gateways that are not able to be monitored since they are behind a (GC)NAT device? So we don't see all sorts of red crosses on the gateway overview page on the management server?

Re: Disable gateway monitoring

G_W_Albrecht — Tue, 26 May 2020 08:38:19 GMT

I would think that these red crosses contain valid status information - as the GWs are unreachable from Management, no logs are received and no policy can be installed...

Re: Disable gateway monitoring

Nik_Bloemers — Tue, 26 May 2020 09:57:33 GMT

Policy can be fetched by SMB appliances and they can send logs just fine (outbound traffic to the SMS is NATed fine by the (CG)NAT device). They just can't be reached by AMON from the SMS.

Re: Disable gateway monitoring

Martin_Raska — Tue, 04 Apr 2023 07:33:28 GMT

Hi,

I have the same question, the customer is very strict about monitoring and does not want to see any warnings or errors in SmartConsole.

eg. we have an object of GW that is needed for Locally managed SMB to be able to send logs to central managed SMS. This object cannot be monitored by SMS and therefore makes an error in smart console.

The question is how to disable AMON for monitoring of unsupported devices/gw.

Re: Disable gateway monitoring

G_W_Albrecht — Tue, 04 Apr 2023 07:41:17 GMT

I had a 730 locally managed included in Dashboard for logging that logged successfully and was shown with a green symbol. Maybe try this: https://community.checkpoint.com/t5/SMB-Gateways-Spark/R81-10-05-Central-Management-issues/m-p/176552

Re: Disable gateway monitoring

Martin_Raska — Tue, 18 Apr 2023 10:56:55 GMT

I was able to fix it, manual FW rule for AMON from SMS to 1530 was needed on local 1530 policy in incoming.

Re: Disable gateway monitoring

Nik_Bloemers — Tue, 18 Apr 2023 10:59:18 GMT

For locally managed appliances I've never had this issue specifically. My issue is mainly with remote gateways that are behind a NAT device.

Re: Disable gateway monitoring

Martin_Raska — Tue, 18 Apr 2023 11:15:04 GMT

My 1530 has Public WAN IP and dropping AMON traffic from SMS in incoming rules