Hostname resolving error - Synology & Check Point appliance

obsidian11 — Wed, 13 Sep 2023 12:06:09 GMT

Greetings CheckMates,

I'm facing really weird issue.

My client has let's say 2 Check Point appliances from 700 series (Central one which is 790) and remote one (which is 750 model).

Central one has main subnet 192.168.0.0/24 and remote one is 192.168.2.0/24 (2, 20, 200 etc.)

On that main subnet there is synology device that has IP 192.168.0.4 and domain is synology.something.tld

VPN sites are configured properly, it was easy task because both devices are CP gateways (NAT is disabled for those sites in preferences, default compatibility).

When I try to do like nslookup synology.something.tld it points to 192.168.0.4

However, when user from remote site tries to access that synology device, sometimes it pass while other times CP just block packets.

Screenshots are below. Any idea why's this happening and how to resolve this?

Re: Hostname resolving error - Synology & Check Point appliance

PhoneBoy — Fri, 15 Sep 2023 23:06:45 GMT

Make sure that both appliances are on the most recent R77.20.87 firmware.
See: https://support.checkpoint.com/results/sk/sk151574
Otherwise, you may need TAC to assist with debugging this.

topic Re: Hostname resolving error - Synology & Check Point appliance in Spark Firewall (SMB)

Hostname resolving error - Synology & Check Point appliance

Re: Hostname resolving error - Synology & Check Point appliance