topic Re: Firewall transparency in Spark Firewall (SMB)

Firewall transparency

joaoleca — Tue, 31 Jan 2023 14:25:50 GMT

Hi, I have1 Checkpoint 1600 SMB appliance.

For the moment they want to connect it in a way that it doesnt disturb the network since the internet provider's router is the one that distributs DHCP for all the network and it does layer 3.

How can i configure the firewall so it can be put between the router and the client switches without disturbing the network infrastructure (IPs, routes, vlan)?

On the top you have the origial structure on the bottom i how i want it to be.

Re: Firewall transparency

PhoneBoy — Tue, 31 Jan 2023 14:59:42 GMT

Create a bridge between the LAN and WAN.
Refer to: https://sc1.checkpoint.com/documents/SMB_R81.10.05/AdminGuides/Locally_Managed/EN/Content/Topics/Configuring-Local-Network.htm?Highlight=bridge%20mode

Re: Firewall transparency

joaoleca — Fri, 03 Feb 2023 09:52:46 GMT

I appreciate the input but the provider wont change the configuration of the router.

The firewall is recieving a private IP from the provider and we have to keep that same IP range for the internal network.

Is there any way to configure just to analyze the trafic?

Re: Firewall transparency

PhoneBoy — Fri, 03 Feb 2023 15:27:46 GMT

This doesn’t require changing anything on the upstream router.
Once the bridge is configured on the 1600, plug the WAN into your existing router and plug the LAN into your other devices.
You will have to manually configure an IP on the 1600 on the bridge, which should be in the same network as the rest of your LAN.