topic Re: Manage 1575 in Spark Firewall (SMB)

Manage 1575

Moudar — Thu, 13 Jun 2024 13:07:03 GMT

Hi,

I need to install a Check Point SMB firewall at a branch office. This firewall will be used solely to route all traffic via VPN to the central office, where it will be inspected against the policy rules set on the central office firewall. Does this firewall require a local policy when it is centrally managed?

If so, how should the policy be configured on the central Security Management Server (SMS)?

Re: Manage 1575

the_rock — Thu, 13 Jun 2024 14:09:18 GMT

It would not need any local policy if its managed centrally, as all the rules would be "pulled" from mgmt server.

Re: Manage 1575

Moudar — Thu, 13 Jun 2024 14:20:42 GMT

so on central SMS, would it need a new policy rule or same rule installed on central firewall? If new policy, what rules should that policy have?

Re: Manage 1575

the_rock — Thu, 13 Jun 2024 14:43:44 GMT

Hey bro,

I cant answer that question for sure, as I dont know your rules, but personally, I would set up new policy package just for that new fw and create rules based on the access you need.

Best,

Andy

Re: Manage 1575

PhoneBoy — Thu, 13 Jun 2024 19:22:19 GMT

When centrally managed, so is the policy (and it has to have one).
The policy would simply allow traffic out from the relevant networks through the VPN connection.