Difference Between Configuring Proxy on Firewall CLI vs Cluster Object in SmartConsole

[RemoteUser]

What is the difference between setting the proxy on the firewall via CLI or setting a proxy on the cluster object in SmartConsole?
Can i have two different proxy in clish and in the cluster object? 
Thanks

[the_rock · Accepted solution]

Hey bro,

Here is what I know about it, but maybe someone else can confirm. Yes, you can have two configured, one in clish and one in smart console. Difference is that one in clish mostly serves for cpuse downloads, smart update connection and one in smart console is more related to blade updates and some services that may need communication to the cloud.

Best,

Andy

[the_rock]

By the way bro, what is the goal here?

Best,

Andy

[RemoteUser]

just out of curiosity bro thk

[PhoneBoy · Accepted solution]

I suspect one is for Gaia OS functions (e.g. getting updates in CPUSE and such), the other is for the other things you configure in SmartConsole 🙂
I suppose they can be different.

[JozkoMrkvicka]

There is also 3rd option to configure proxy: SmartConsole -> Global Properties

[the_rock]

Never seen it there, will check it later.

Andy

[the_rock]

I see now where it is.

Andy

[Henrik_Noerr1]

yeah - with three places to set proxy it's quite messy.

Can we get some response from Check Point, and maybe have documentation updated and aligned 🙂

How does the three play together and what proxy is used in what scenarios:

crl, cpinfo uploads, IPS signatures, license checks, updatable objects, ioc feeds, and much much more.

Regards,

Henrik

[the_rock]

I would agree Henrik. should be set to single place.