topic Re: Check Point Hosts VS CheckPoint Gateway in General Topics

Check Point Hosts VS CheckPoint Gateway

S_E_ — Thu, 03 Apr 2025 13:41:05 GMT

Hi,

just found this comment on R81.20 admin guide

A Check Point Host has no routing mechanism, is not capable of IP forwarding, and cannot be used to implement Anti-Spoofing. If the host must do any of these, convert it to be a Security Gateway.

Is there really a convertion possible?

Or is it more a 'frest install' meant.

Regards

Re: Check Point Hosts VS CheckPoint Gateway

the_rock — Thu, 03 Apr 2025 14:01:09 GMT

I dont see any option to convert, it probably means its totally new object. Essentially, both mgmt object and say separate smart event would be considered as CP host objects.

Andy

Re: Check Point Hosts VS CheckPoint Gateway

PhoneBoy — Thu, 03 Apr 2025 16:41:40 GMT

Way back when, it used to be possible to convert a Check Point Host object to a Check Point Gateway object.
It's not currently, so you would have to delete/recreate the object.

In terms of the actual appliance itself, the "Host" versus "Gateway" function is determined by what you select during First-Time Wizard.
While it is theoretically possible to convert without reinstalling (with registry hacks), your best bet is a fresh install.

Re: Check Point Hosts VS CheckPoint Gateway

the_rock — Thu, 03 Apr 2025 17:09:51 GMT

I remember doing conversion option once, but I totally screwed it up, so never tried again lol

Andy

Re: Check Point Hosts VS CheckPoint Gateway

the_rock — Thu, 03 Apr 2025 17:28:52 GMT

Actually, I lied...once I did convert regular gw to VSX and it did work!

Andy