https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/Allowed-Clients-Networks-in-Maestro/m-p/152854#M1034 <P>Quite often I come across with a Maestro installation that has some connectivity issues. Typically you cannot connect from the orchestrators to the SGMs or connection between the SGMs doesn't seem to work properly.</P> <P>Reason is in incorrect configuration of the allowed clients or networks. Gaia allows limiting access per device basis using set allowed-client command. This works fine in regular gateways and cluster, but in Maestro that uses internal networks for connectivity, it can cause problems.<BR /><BR />If you want to limit access with the allowed client or network command, always add the following networks:<BR /><BR /><STRONG>192.0.2.0/24</STRONG></P> <P><STRONG>198.51.10x.0/24</STRONG> (x is the security group number)</P> Wed, 13 Jul 2022 05:40:49 GMT Lari_Luoma 2022-07-13T05:40:49Z https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/Allowed-Clients-Networks-in-Maestro/m-p/152854#M1034 <P>Quite often I come across with a Maestro installation that has some connectivity issues. Typically you cannot connect from the orchestrators to the SGMs or connection between the SGMs doesn't seem to work properly.</P> <P>Reason is in incorrect configuration of the allowed clients or networks. Gaia allows limiting access per device basis using set allowed-client command. This works fine in regular gateways and cluster, but in Maestro that uses internal networks for connectivity, it can cause problems.<BR /><BR />If you want to limit access with the allowed client or network command, always add the following networks:<BR /><BR /><STRONG>192.0.2.0/24</STRONG></P> <P><STRONG>198.51.10x.0/24</STRONG> (x is the security group number)</P> Wed, 13 Jul 2022 05:40:49 GMT https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/Allowed-Clients-Networks-in-Maestro/m-p/152854#M1034 Lari_Luoma 2022-07-13T05:40:49Z