Check Point Hosts VS CheckPoint Gateway

[S_E_]

Hi,

just found this comment on R81.20 admin guide

A Check Point Host has no routing mechanism, is not capable of IP forwarding, and cannot be used to implement Anti-Spoofing. If the host must do any of these, convert it to be a Security Gateway.

Is there really a convertion possible?

Or is it more a 'frest install' meant.

Regards

[the_rock]

I dont see any option to convert, it probably means its totally new object. Essentially, both mgmt object and say separate smart event would be considered as CP host objects.

Andy

[PhoneBoy · Accepted solution]

Way back when, it used to be possible to convert a Check Point Host object to a Check Point Gateway object.
It's not currently, so you would have to delete/recreate the object.

In terms of the actual appliance itself, the "Host" versus "Gateway" function is determined by what you select during First-Time Wizard.
While it is theoretically possible to convert without reinstalling (with registry hacks), your best bet is a fresh install.

[the_rock]

I remember doing conversion option once, but I totally screwed it up, so never tried again lol

Andy

[the_rock]

Actually, I lied...once I did convert regular gw to VSX and it did work!

Andy