topic Re: SMB bridge problem in Spark Firewall (SMB)

SMB bridge problem

Sergey_Anikeev — Mon, 04 Apr 2022 19:28:10 GMT

Hi Colleagues.
Help to understand what could be the problem?

So there is a device SMB 1100
Version: R77.20.80 (990172392)

The device is controlled centrally with SMS R81 GAIA.

On the device configured Bridge for two interfaces
LAN8 and DMZ.

LAN8 -> Windows PC
DMZ -> INT LAN GW R81 GAIA -> Internet.

Traffic walks perfectly through this Bridge, but does not work Application @ Url Filtering and HTTPS inspection.
There are no entries in logs on these two blades.

Re: SMB bridge problem

Chris_Atkinson — Tue, 05 Apr 2022 00:41:46 GMT

Per sk111756 / sk102296 how are the following advanced settings currently configured?

Note 1100 & R77.20.80 will be End of Support in Jun-2022 and you should consider upgrading for relevant feature enhancements such as sk123035 amongst others.

Re: SMB bridge problem

Sergey_Anikeev — Tue, 05 Apr 2022 06:37:09 GMT

For sk102296
I turned on for dpi_lan_lan and dpi_lan_dmz
True

(the problem is not solved)

For sk111756
I did not find parameter Allow LAN-LAN DPI.

Re: SMB bridge problem

G_W_Albrecht — Tue, 05 Apr 2022 07:04:53 GMT

The sk102296 is for centrally managed SMBs like you have - Additional Settings from sk111756 do not apply here, only for locally managed SMBs! Did you do a policy install and are the new values viewable in DBedit ?

Re: SMB bridge problem

Sergey_Anikeev — Tue, 05 Apr 2022 07:14:50 GMT

Yes.

Re: SMB bridge problem

G_W_Albrecht — Tue, 05 Apr 2022 07:28:50 GMT

I would suggest to contact TAC - this did work in newer firmware versions as expected ! But i do not see why you are not using the WAN IF...

Re: SMB bridge problem

Sergey_Anikeev — Tue, 05 Apr 2022 08:23:39 GMT

OK, thanks, I will try to make SR in TAC.

WAN is used to connect SMB to SMS.

And Bridge is needed to connect users to another gateway with internet access and VPN (not Check Point).

Unfortunately, the scheme is not yet able to change.

Re: SMB bridge problem

G_W_Albrecht — Tue, 05 Apr 2022 08:39:35 GMT

WAN is used to connect SMB to SMS. Sorry, but 🤣...

Re: SMB bridge problem

Sergey_Anikeev — Tue, 05 Apr 2022 08:52:06 GMT

🤷‍

SMS is in another region.

SMB is located in the branch office.

Re: SMB bridge problem

G_W_Albrecht — Tue, 05 Apr 2022 09:48:31 GMT

I thought that WAN is connected to an ISP not directly to the SMS 8) That should work, so TAC is my only hope !