On premise Datacenter objects within smart 1 cloud

[bigzell]

Hi,

We're using Smart-1 Cloud and trying to add our on-premise Proxmox VE hosts as datacenter objects. Every time we attempt to add them, the connection just times out.

The Proxmox API is working as expected. We've checked our traffic logs and can't see any traffic or connection attempts reaching the hosts at all.

How would Smart-1 Cloud even reach on-premise hosts? Is there a proxy through the on-prem gateway that needs to be configured, or is this not supported for hosts that aren't publicly reachable?

[Wolfgang]

I believe that‘s not possible. The only proxy solution I know is the integration with an on premise Active Directory via the AD-proxy feature of a gateway. See How to Connect a Local Active Directory to Smart-1 Cloud 

[PhoneBoy]

I have a feeling this isn't supported, though I can't find any documentation to back that up.
Suggest checking with TAC. 

[Hugo_vd_Kooij]

That connection must work directly from the Management system to the Proxmox system.

I have configured it locally and it works.

But in your case you have to setup NAT/ACL to allow the cloud to reach your proxmox server(s). Then configure it on the public IP addresses and I expect it will work.

[Tomer_Noy]

This is a similar use case to customers who export logs to an on-prem SIEM.

You would need to open a rule in your FW to allow Smart-1 Cloud to reach your on-prem environment. The following SK shows how to do that:
https://support.checkpoint.com/results/sk/sk182699 

You can do it with FQDNs, or even use a dedicated Updatable Object that represents Smart-1 Cloud egress IPs.