topic Re: Backup over vpn in Spark Firewall (SMB)

Backup over vpn

ibrown — Thu, 17 Oct 2024 11:55:32 GMT

Hello Everyone,

odd question this, but I've not found a solution as yet. I have several Quantum spark appliances around the world in branch offices, connected to the main office via vpn.

I schedule periodic backups but these come out via the external (ie primary) interface address and don't decrypt and route correctly at the main office end. Is there a way to force an interface for the ftp traffic ?

Currently I send to an externally facing SFTP server, but ideally I'd come via the vpn.

Any thoughts ?

Thanks

Ian

Re: Backup over vpn

Chris_Atkinson — Thu, 17 Oct 2024 12:31:16 GMT

Locally or centrally managed?

In advanced settings there is an option to source locally generated traffic from the internal address as an option.

"Use Internal IP address for encrypted communications from the local gateway"

Other options exist but may add unnecessary complexity in configuration

Re: Backup over vpn

ibrown — Thu, 17 Oct 2024 12:43:37 GMT

Hi Chris, this is a spark 1570 R81.10.08, and centrally managed. However the only option in advanced I can see is '
DHCP relay - Use internal IP addresses as source'

Re: Backup over vpn

PhoneBoy — Thu, 17 Oct 2024 18:05:40 GMT

The procedure is different for centrally managed SMB appliances: https://support.checkpoint.com/results/sk/sk119415

Re: Backup over vpn

ibrown — Fri, 18 Oct 2024 10:25:01 GMT

Brilliant thank you ! Tested and works

Re: Backup over vpn

ibrown — Mon, 21 Oct 2024 09:14:22 GMT

Anyone know if this is possible on a 3000 appliance ?

I have three 3200s running R81.20 - Build 011

They are centrally managed so the setting is not available and the kernel setting does not seem available

Set operation failed: failed to get parameter fw_enc_conns_use_internal
set: Operation failed
/bin/cpfw_start: line 12: 29398 Killed $FWDIR/bin/fw "$@"

Re: Backup over vpn

PhoneBoy — Mon, 21 Oct 2024 17:12:20 GMT

This is specific to SMB.
I don't believe it has an equivalent on regular gateway but perhaps a specific NAT rule will achieve the desired result?

Re: Backup over vpn

ibrown — Mon, 04 Nov 2024 15:33:41 GMT

Thank you, I shall try that.