internet access through firewall

[lcako]

Hi,

I have a netis router with ip 172.20.10.2 and gateway 172.20.10.1 , also i have firewall sg3600 with mgnt ip 192.168.1.1 , eth1 ip192.168.4.1 and eth2 ip 192.168.5.2 . i want to deploy this firewall and have internet access in my laptop.

What i did is :

Log in to Netis Router (http://172.20.10.2)
Go to: Network > Routing

 Add a static route:

Destination: 192.168.4.0
Subnet Mask: 255.255.255.0
Gateway: 192.168.5.2 (Firewall eth2)

Add Static Route in Gaia WebUI

Login to Check Point Gaia WebUI (https://192.168.1.1).
Go to: Network Management > IPv4 Static Routes.
Add the following routes:

• Route for Internet traffic:
  • Destination: 0.0.0.0/0
  • Gateway: 172.20.10.1 (Netis Router Gateway)
  • Interface: eth2
• Route for LAN traffic:
  • Destination: 192.168.4.0/24
  • Gateway: 192.168.4.1 (Firewall eth1)
  • Interface: eth1
    

    Configure Hide NAT in SmartConsole

    Open SmartConsole → Security Policy → NAT.
    Add a new Hide NAT Rule:

    • Original Source: 192.168.4.0/24 (Internal network)
    • Original Destination: Any
    • Service: Any
    • Translated Source: 192.168.5.2 (Firewall eth2 IP)
    • Save & Install Policy.

    Step 4: Set Laptop Network Configuration

    Your laptop must use the firewall’s eth1 IP (192.168.4.1) as the default gateway.

    Go to Network Settings on Laptop
    Set Static IP:

    • IP Address: 192.168.4.100
    • Subnet Mask: 255.255.255.0
    • Default Gateway: 192.168.4.1 (Firewall eth1)
    • DNS Server: 8.8.8.8 (Google DNS) Save & Restart Network.

    Configure Security Policy in SmartConsole

    The firewall must allow traffic from eth2 (WAN) to eth1 (LAN).

    Add Access Control Rule in SmartConsole

    Go to SmartConsole → Security Policy > Access Control.
    Create a New Rule:

    • Source: 192.168.4.0/24 (Internal network)
    • Destination: Any
    • Service: Any
    • Action: Accept Save & Install Policy.
    On firewall SSH i can ping netis router , but cannot ping internet 8.8.8.8.