topic Re: Use Checkpoint SMB as Layer 2 Brdige to block traffic in Spark Firewall (SMB)

Use Checkpoint SMB as Layer 2 Brdige to block traffic

MTS — Mon, 22 Jan 2024 03:43:47 GMT

Hi all,

Is me again.

I am trying to deploy the SMB as a bridge to project my network as a first-tier layer.

The design is like this:

SMB uses Wan port to update UTM, Lan 3 and 4 are layer 2 and the connection like this:

The UTM feature on Fortigate is disabled already.

We find that:

IF both Lan 3 and 4 are under the same bridge, the UTM is NOT working.

IF both Lan 3 and 4 are under the same switch, the UTM is NOT working.

If we assign Lan 4 and 5 as one switch first, then assign the switch and Lan3 as the same bridge, the UTM is working now.

I wonder: why the hell with this design make things work?

Re: Use Checkpoint SMB as Layer 2 Brdige to block traffic

PhoneBoy — Tue, 23 Jan 2024 15:26:19 GMT

This option needs to be enabled (it's not by default):

Re: Use Checkpoint SMB as Layer 2 Brdige to block traffic

MTS — Mon, 29 Jan 2024 09:28:27 GMT

So the Bridge mode will work with UTM after I enable this?

And that does not mean SSL inspection, right?

Re: Use Checkpoint SMB as Layer 2 Brdige to block traffic

PhoneBoy — Wed, 07 Feb 2024 23:50:57 GMT

Any "UTM" features will require this feature to be enabled where two LAN interfaces are used.
SSL Inspection would have to be configured separately (if applicable).