Publications via FW

[Matlu]

Hello everyone,
When you publish a service (for example, a server on port 8443) via the FW CP.
Is it necessary to “configure” Proxy ARP?
If the answer is YES, should this configuration be done via the Gaia WebUI, or should it be done via the CLI by “editing” the local.arp file?
Thanks for your comments.

[PhoneBoy]

What IP is the service reachable on?
If the firewall IP, then no, it is not necessary,
If some other IP, it looks like you should do this through Gaia WebUI/clish these days.
See: https://support.checkpoint.com/results/sk/sk30197 

[Chris_Atkinson]

Is the NAT IP in the same subnet as the external interface of the Firewall or a separate routed subnet?

[simonemantovani]

Hello

let me add ... if the IP address you're using for NAT, belongs to the same subnet of the firewall then you need to configure proxy arp, you can use webUI or clish, and to apply the proxy arp you have to install the policy.

Remember, proxy arp is needed only if you're configuring a manual NAT, in case of automatic static nat you don't need to configure proxy arp manually.

If the IP address used for the NAT belongs to a different public network, this network should be routed to the firewall then proxy arp is not needed.