topic Re: Does CheckPoint Spark has a function perform like SonicWall transparent IP mode (Splice L3 Subne in Spark Firewall (SMB)

Does CheckPoint Spark has a function perform like SonicWall transparent IP mode (Splice L3 Subnet)

ken2 — Wed, 20 Nov 2024 05:30:39 GMT

Hi...

Does CheckPoint Spark has a function perform like SonicWall transparent IP mode (Splice L3 Subnet). What it does is it will forward the public L3 address to destination server which has the same L3 subnet IP address and that is consider as a DMZ zone. For example, the WAN interface is set to 173.44.16.37/28, the Web server behind this firewall has assigned the IP 173.44.16.38/28 and Email server IP address is 173.44.16.39/28. People from Internet can assess the web server by using the IP 173.44.16.38. When I migrate the SonicWall into CheckPoint Spark, I don't know how to make CheckPoint act like this.

Ken

Re: Does CheckPoint Spark has a function perform like SonicWall transparent IP mode (Splice L3 Subne

PhoneBoy — Wed, 20 Nov 2024 15:51:05 GMT

Sounds like Bridge Mode to me, which is definitely supported.
You would have to set up the bridge with the WAN and DMZ interface (or a specific LAN port, if you prefer).

Re: Does CheckPoint Spark has a function perform like SonicWall transparent IP mode (Splice L3 Subne

ken2 — Fri, 22 Nov 2024 02:44:21 GMT

Yes, we did use the bridge mode to set up with the WAN and DMZ interface but we need to change the gateway IP for all servers which is originally point to SonicWall into the ISP gateway IP when using the bridge mode in CheckPoint. Is it because the bridge mode in CheckPoint is a layer 2 instead of layer 3 in SonicWall?

Re: Does CheckPoint Spark has a function perform like SonicWall transparent IP mode (Splice L3 Subne

PhoneBoy — Fri, 22 Nov 2024 13:31:41 GMT

Bridge Mode operates at Layer 2, yes.