L2 ethernet link termination on firewall

[Gaurav_Pandya]

Hi,

We have checkpoint 5200 appliance running R80.20. Currently we are running on one ISP. Now we have taken another L2 ethernet link to connect between sites and we want to terminate it on checkpoint firewall. If i make one bridge interface and terminate L2 link, will it work? Anyone has any thoughts, how this will be achieved

[_Val_]

Depends on specific topology. There is no problem to do L2 firewalling, but you need to keep networking decisions in mind

[Alessandro_Marr]

show us the topology...

[PhoneBoy]

Can you run Check Point in L2 mode? Yes.
One thing you need to be careful of is to make sure we don't see the same traffic twice.
This might happen if the traffic comes in/out via the bridge and then is routed through a Layer 3 interface.
This is so-called "double inspection" and will cause traffic to drop.