Flux dns et ping Check point

[Niokhobaye]

In a network architecture . We have a Check point front-end firewall version R77.30. The objective is to replace this Check Point firewall with a Check Point Quantum 6200 cluster. On the back end, we have a Fortinet back-end firewall. Partial migration is already done manually: host, service, domain, network, network group etc. and even policies (disable). But the migration is not yet complete. We have connected the new Check Point to the network (no static route configured). How do you explain the fact that flows pass through the new Check point firewall? (DNS and ping flows).

[the_rock]

Can you send output of command route from expert mode?

Andy

[PhoneBoy]

Without any idea what the topology is, it's difficult to answer that question.
Please provide a network diagram.

[Niokhobaye]

hi you can the screenshot PJ (Logs and Topology) Thanks

[PhoneBoy]

You are seeing logs, clearly.
Did you verify actual end-to-end connectivity or do any tcpdumps to see that traffic was leaving the gateway?

[Niokhobaye]

Yes, there are peplinks in front of the check points (connectivity works with the check points successfully). Outgoing flows go to the old check point. This problem occurred when we manually migrated all policies to the new check point (especially NAT flows).