topic Re: DMZ Port not working for second ISP connection in Spark Firewall (SMB)

DMZ Port not working for second ISP connection

Rakesh_Gupta — Mon, 03 Dec 2018 07:04:45 GMT

Checkpoint DMZ port is not working for 2nd ISP connection. When i flipped the ISP connection, it was working fine on WAN port. What step should take to make it work?

Re: DMZ Port not working for second ISP connection

G_W_Albrecht — Mon, 03 Dec 2018 07:43:07 GMT

Please explain of which HW / SW you are speaking of ! And further details would be very appreciated, too. Afaik only SMB devices have a pre-defined DMZ port, so this should be posted inSMB and SMP

Re: DMZ Port not working for second ISP connection

Rakesh_Gupta — Mon, 03 Dec 2018 08:47:17 GMT

I have Checkpoint 750 SMB product and configuring the ISP as DHCP type.

Re: DMZ Port not working for second ISP connection

Egor_Cherkasov — Mon, 03 Dec 2018 11:34:30 GMT

Hello!

As I've understood you are speaking about ISP redundancy, because you want to establish the second connection to the ISP.

There are ISP redundancy configuration steps, check it, because you might be have done a little mistake:

1)Open GW or cluster object properties

2)go to the Other>ISP Redundancy

3)select support ISP Redundancy

4)choose the mode : Load Sharing or Primary/Backup

5)Adding ISP links:

1.in the ISP links in order of priority click Add

2.enter the name, interface,next hop IP (it's ISP's IP)

3. repeat 1-2 steps to add one more link.

4. click OK.

Also if you want to configure DNS proxy ro VPN with ISP Redundancy you needs an addditional configuration.

Hope that will help you.

Re: DMZ Port not working for second ISP connection

Danny — Mon, 03 Dec 2018 12:22:04 GMT

Also check out my 1400 Appliance FAQ. It might be well worth the read, though you are using a locally managed 700 appliance model.

Re: DMZ Port not working for second ISP connection

G_W_Albrecht — Mon, 03 Dec 2018 13:36:25 GMT

Your steps will not work on a Checkpoint 750 SMB - it has no Dashboard at all 😞 I would rather suggest to check config using Check Point 600/700 Appliances Administration Guide R77.20.80 p.43 !

Re: DMZ Port not working for second ISP connection

Rakesh_Gupta — Mon, 03 Dec 2018 16:31:36 GMT

The default DMZ port of Checkpoint 750 appliance is not working with Redundant ISP connection. When ISP connection on WAN port goes down the DMZ Port does not work as redundant internet connection.

Even if try to get internet directly through the DMZ port, it does not work.

Re: DMZ Port not working for second ISP connection

PhoneBoy — Tue, 04 Dec 2018 03:19:27 GMT

Please explain how you have configured the ISP connections.

Screenshots may be helpful.

Also how did you attempt to "flip" the ISP connection?