topic Re: Add a SMB gateway on MDS using mgmt_cli in Spark Firewall (SMB)

Use Policy for a 12400 with a new SMB Cluster

kamaladmire1 — Tue, 13 Dec 2022 01:26:30 GMT

HI quick question,

I have 12400 appliances installed as single gateway with 1 VPN and about 300 access rules managed by Mgmt server, looking to migrate that to 1800 SMB Cluster, I am new to SMB appliances and not sure if this can be achieved and manage with Management server which managining other gateways,

any respinse much appreciated.

Re: Add a SMB gateway on MDS using mgmt_cli

Chris_Atkinson — Mon, 12 Dec 2022 14:36:26 GMT

Is this an API or general migration query?

Those are two very different class of devices, how much traffic does the 12400 handle?

The same management can likely be used depending on the version?

Re: Add a SMB gateway on MDS using mgmt_cli

G_W_Albrecht — Mon, 12 Dec 2022 15:59:04 GMT

12400 (from Aug 2011) went out of support this June and has last version R80.40. Successor product is the 16200.

Re: Add a SMB gateway on MDS using mgmt_cli

PhoneBoy — Mon, 12 Dec 2022 17:21:19 GMT

Can you take the policy crafted for your 12400 and use it on an SMB appliance managed with the same management?
There are a couple of exceptions (mostly around legacy features), but generally yes.

Re: Add a SMB gateway on MDS using mgmt_cli

kamaladmire1 — Mon, 12 Dec 2022 18:48:32 GMT

thanks all, another question on this as I am going from single gateway to cluster, I also want to configure Dual ISP link, ISP 1 (VMB) I have spare Public IP's that I can use with VIP (3 IP's) with second ISP s Link (talk talk) I have just 1 Public IP with Default Gateway. can this be achived dual ISP redunduncy, I dont know how 1 Public IP from ISP-2 link can be used on cluster?

another question about S2S VPN, should that be just a matter of setting up link selection??

Thanks

Re: Add a SMB gateway on MDS using mgmt_cli

Chris_Atkinson — Fri, 23 Dec 2022 12:32:01 GMT

I would suggest creating a separate thread as this discussion has now deviated considerably from the original thread topic.

Whilst ClusterXL on the 12400 supports the VIP and interface IPs being on different subnets this was a limitation of Spark appliances that was only recently resolved with R81.10.XX per:

Source: sk178604: Check Point R81.10.X for 1500, 1600, and 1800 appliance Known Limitations and Resolved Issues

Re: Add a SMB gateway on MDS using mgmt_cli

PhoneBoy — Tue, 13 Dec 2022 01:27:02 GMT

Or I can just fork these comments from the original thread and create a new one 🙂

Re: Use Policy for a 12400 with a new SMB Cluster

S49inchgoldmine — Tue, 27 Dec 2022 09:25:47 GMT

Hello Kaladmire1,

I saw this post very late so I dont know if you achieved your goal finally.

Anyway according to sk168880 if your management server has r81 or higher (r80.30 and r80.40 too with some conditions) then its possible manage 1600/1800 gateways.

Re: Use Policy for a 12400 with a new SMB Cluster

PhoneBoy — Tue, 27 Dec 2022 15:43:56 GMT

That's running R80.20.x releases.
For R81.10.x releases, your management needs to be running R81.10 with at least JHF Take 66 installed.