topic Re: Add Checkpoint device R80 in Tufin in General Topics

Add Checkpoint device R80 in Tufin

Jesus_Cano — Mon, 15 Oct 2018 09:01:59 GMT

Hi,

We just changed our Checkpoint devices to R80. Now we want to add these devices to tufin platfom. We are trying to do the OPSEC communicatoin step with no success. Someone has done this correctly?? any web with the steps.

We are follow the tufin step but its not clear what we need to do.

Checkpoint is a active/passive cluster. Not MDS/CMA.

Thanks

Re: Add Checkpoint device R80 in Tufin

Kaspars_Zibarts — Fri, 21 Jun 2019 09:21:11 GMT

Have you checked this:

https://community.checkpoint.com/docs/DOC-3108-tufin-integration-with-check-point-r80docx

it covers most of the aspects

Re: Add Checkpoint device R80 in Tufin

Kaspars_Zibarts — Mon, 15 Oct 2018 09:27:02 GMT

When you say active/passive - do you refer to actual gateways, not management? As OPSEC runs only on management

Re: Add Checkpoint device R80 in Tufin

Jesus_Cano — Mon, 15 Oct 2018 09:36:58 GMT

Hi Kaspar,

Active/passive cluster (VSX). And two SMS active/passive too. Not full HA.

So what should i add in tufin??? I think we should add SmartCente right???

Re: Add Checkpoint device R80 in Tufin

Kaspars_Zibarts — Mon, 15 Oct 2018 09:48:09 GMT

Yep, you want to add management. It will also add minimum topology data from gateways automatically (interfaces and routes on all VSes). I wouldn't bother adding actual gateways

Re: Add Checkpoint device R80 in Tufin

Jesus_Cano — Mon, 15 Oct 2018 09:52:01 GMT

Basically, we need for security audit, get all policies from tufin.....

So to add SMS, we need to choose SmartCenter. but where you choose a gateway??

we only see these 3 options:

Adding Check Point R80.x MDS Devices

Adding Check Point R80.x CMA Devices

Adding Check Point R80.x SmartCenter Server Devices

Re: Add Checkpoint device R80 in Tufin

Kaspars_Zibarts — Mon, 15 Oct 2018 10:00:27 GMT

As I wrote before - it will also add minimum topology data from gateways automatically. You don't have to add it manually

Re: Add Checkpoint device R80 in Tufin

Kaspars_Zibarts — Tue, 16 Oct 2018 06:29:14 GMT

Here you can see the screenshot from license screen - we have only added CMAs (one CMA = SMS), but we automatically see all gateways attached to this management, virtual or physical, with all topology associated with them.