topic Re: Management behind nat with SMB centrally managed in Spark Firewall (SMB)

Management behind nat with SMB centrally managed

Bac26 — Thu, 06 Jun 2024 08:10:06 GMT

Hello

i configured the management nat behind a cluster gw facing internet, so smb can connect to it.

Now intranl smb in a intranet community try send log to the nated IP

how do i achieve internal smb keep connect and send lot to real IP

Thank you

Re: Management behind nat with SMB centrally managed

PhoneBoy — Thu, 06 Jun 2024 14:24:59 GMT

Version/JHF of all related components?
How precisely did you configure the NAT?
It should be done on the Management object itself.

Also, I believe it is normal for the gateway to try both the NAT and non-NAT IP when sending logs.
See also: https://support.checkpoint.com/results/sk/sk160853

Re: Management behind nat with SMB centrally managed

Bac26 — Mon, 10 Jun 2024 07:57:34 GMT

Hello

sorry but i have an issues on that.

All vpn (intranet) with centrally managed (81.20) when we statically nat the management (for INTERNET GW) goes down.

The Intranet SMB try to reach the Public IP

so internet facing SMB need connect PUBLIC IP, intranet need connect REAL IP

any help on that?

Thank you

Re: Management behind nat with SMB centrally managed

PhoneBoy — Mon, 10 Jun 2024 17:59:22 GMT

The "masters" file is what you need to modify on the relevant gateway(s) to change the default behavior.
There isn't formal documentation on it anymore as it is generally not necessary to change this file manually.
This appears to be one of those situations where it is necessary to do so and why we still have SKs that refer to it.

@_Val_ has something on this file on his CCMA blog on the masters file: https://checkpoint-master-architect.blogspot.com/2015/01/overriding-default-logging-settings-of.html
It applies to SMB appliances as well.
You will most likely also need to perform the steps here for the file to take effect: https://support.checkpoint.com/results/sk/sk102712

The SK I mentioned previously may also be required.