Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Andrey_Gl
Explorer
Explorer

Exclude CPM Traffic from Implied Rules for one GW r81.10

We manage a lot of gateways through our SMS, but on one gateway there is a need to encypt management traffic (CPM, etc.) through a tunnel. How can we configure the implied_rules.def file so that the traffic specifically to that gateway does  go through the tunnel but not for others?

0 Kudos
2 Replies
Tal_Paz-Fridman
Employee
Employee

Please look at:

https://community.checkpoint.com/t5/Management/Exclude-CPM-Traffic-from-Implied-Rules/m-p/9187#M1452

 

And:

sk105719  CPMI/CPM traffic from remote SmartConsole client to the Management Server is not encrypted, but accepted by Implied Rules instead:

https://support.checkpoint.com/results/sk/sk105719

 

But as PhoneBoy wrote:

"As a general rule, it is a bad idea to force control connections through the VPN.

If your VPN goes down for any reason, getting it back up when you have no ability to manage the gateway becomes a challenge."

 

0 Kudos
Andrey_Gl
Explorer
Explorer

I agree with you, but there is only one cluster of gateways and there is only one public address (the vip address is public, and the addresses on the nodes are local), so it is not possible to manage them outside the tunnel.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events