topic Flux dns et ping Check point in General Topics

Flux dns et ping Check point

Niokhobaye — Wed, 08 May 2024 17:41:35 GMT

In a network architecture . We have a Check point front-end firewall version R77.30. The objective is to replace this Check Point firewall with a Check Point Quantum 6200 cluster. On the back end, we have a Fortinet back-end firewall. Partial migration is already done manually: host, service, domain, network, network group etc. and even policies (disable). But the migration is not yet complete. We have connected the new Check Point to the network (no static route configured). How do you explain the fact that flows pass through the new Check point firewall? (DNS and ping flows).

Re: Flux dns et ping Check point

the_rock — Wed, 08 May 2024 19:52:14 GMT

Can you send output of command route from expert mode?

Andy

Re: Flux dns et ping Check point

PhoneBoy — Wed, 08 May 2024 23:23:22 GMT

Without any idea what the topology is, it's difficult to answer that question.
Please provide a network diagram.

Re: Flux dns et ping Check point

Niokhobaye — Thu, 09 May 2024 09:59:40 GMT

hi you can the screenshot PJ (Logs and Topology) Thanks

Re: Flux dns et ping Check point

PhoneBoy — Thu, 09 May 2024 15:02:17 GMT

You are seeing logs, clearly.
Did you verify actual end-to-end connectivity or do any tcpdumps to see that traffic was leaving the gateway?

Re: Flux dns et ping Check point

Niokhobaye — Thu, 09 May 2024 15:17:46 GMT

Yes, there are peplinks in front of the check points (connectivity works with the check points successfully). Outgoing flows go to the old check point. This problem occurred when we manually migrated all policies to the new check point (especially NAT flows).