topic Re: Switched from embedded to full Gaia OS GW, gateway object not updating "Topology" to & in General Topics

Switched from embedded to full Gaia OS GW, gateway object not updating "Topology" to "Network Mgmt"

Gasper — Thu, 18 Jul 2024 13:57:42 GMT

Hi everyone!

Recently we replaced one of ours 1490 appliances with 3600 appliance and I noticed that Check Point Gateway object didn't update as I was expecting it to do.

I was expecting Topology will change to Network Management, but it didn't.

I didn't notice any issues with 3600's operation, I am just missing Security Zone option that can be configured under Network Management.

This is picture of object that started as 1490 and was recently replaced with 3600:

This is picture of object that is 3600 from beginning:

3600 in question: R81.20 take 634

MGMT: R81.20 take 631, JHF70

Is this normal behaviour? Can I manually change view of gateway object?

A while a go we replaced Open Server with appliance 1550 and in that case gateway object changed from Network Management to Topology.

Regards!

Re: Switched from embedded to full Gaia OS GW, gateway object not updating "Topology" to &

PhoneBoy — Thu, 18 Jul 2024 16:37:58 GMT

The 3600 and 1490 are different gateway types on the backend.
This includes things like the policy compilation and installation process...and the UI.
Unfortunately, you cannot change the view.
If you're looking to change the zone a given interface is in...you get to it this way:

Re: Switched from embedded to full Gaia OS GW, gateway object not updating "Topology" to &

Gasper — Fri, 19 Jul 2024 07:43:27 GMT

Hi PhoneBoy! Thank you for feedback!
I am aware of the difference between 1490 and 3600. My question is why does Topology/Network Management change only one way? It changes only when switching from full to Embedded Gaia and not the other way around.

Example from Demo mode:

Default view, Hardware: Open server; Network Management

Change Hardware from Open server to any appliance with Embedded Gaia; Network Management changes to Topology

Change Hardware back to Open server; Topology don't change to Network Management

In our case we have Check Point Gateway object, that started as 1490. 1490 was recently replaced with 3600. I changed Check Point Gateway object's Hardware from 1470/1490 Appliances to 3000 Appliances and Topology didn't change to Network Management.
I don't have option to configure Security Zone under Topology tab.

Re: Switched from embedded to full Gaia OS GW, gateway object not updating "Topology" to &

G_W_Albrecht — Fri, 19 Jul 2024 09:12:10 GMT

I would suggest to create a new GW object and replace the old before deleting it. There is a big difference between GAia and Embedded GAiA, so it would be nice if HW change adjusts all settings, but complicated things sometimes fail...

Re: Switched from embedded to full Gaia OS GW, gateway object not updating "Topology" to &

PhoneBoy — Fri, 19 Jul 2024 19:32:45 GMT

My guess is it's the result of some cruft that gets left in the database when you switch object types.
This would have to be investigated by TAC.