topic Re: Rule for traffic between two vlan in Spark Firewall (SMB)

Rule for traffic between two vlan

Gaetano_Nicosia — Sun, 08 Sep 2019 14:01:26 GMT

Good Morning

I have this "scenario" on my Firewall 730.

On LAN1 Ihave created the VLAN 5, 10, 20

On DMZ I have created the VLAN 30, 40,50

Now, for example, I need to create a policy so that only the VLAN 10 can reach VLAN 30 and vice versa.

Since I'm new ino CP, can someone explain to me how to create this policy?

Thanks and best regards

Gaetano

Re: Rule for traffic between two vlan

HeikoAnkenbrand — Sun, 08 Sep 2019 17:16:57 GMT

1) Creat an network objekt for VLAN 10 with the IP address and network mask for example NET_VLAN10 IP192.168.10.0/24

2) Creat the same for VLAN 30 for example NET_VLAN30 IP19.168.30.0/24

3) Now create a policy with both network objekts in source and destination.

4) Install policy:-)

Re: Rule for traffic between two vlan

HeikoAnkenbrand — Sun, 08 Sep 2019 17:16:06 GMT

I recommend you the following articles:

Check Point for beginners

Re: Rule for traffic between two vlan

Gaetano_Nicosia — Mon, 09 Sep 2019 05:43:40 GMT

Thank You for reply.

just a little clarification: what do you mean by "install policy"?

Re: Rule for traffic between two vlan

Wolfgang — Mon, 09 Sep 2019 07:07:05 GMT

If you run your Check Point 730 appliance in central management mode you have to do a "policy install" to push the firewall-policy to your appliance.

But I think you are running your appliance standalone and you are using the Web-UI to manage the firewall-policy. With these configuration you don't need a "policy-install". Clicking the "apply"-button is enough.

Wolfgang

Re: Rule for traffic between two vlan

G_W_Albrecht — Mon, 09 Sep 2019 11:54:51 GMT

No one can run a 730 in central management mode - so this is surely the wrong corner to post the question, it should rather belong to SMB Appliances and SMP