MaaS Tunnel - Local Management

[Sigbjorn]

Hi,

Are there any plans to make the MaaS Tunnel feature available for local installations ?

We really like this new way of handling and allowing traffic, and it would solve quite a few problems for us if it could be made available for our on-prem solutions. 🙂

/Sigbjorn

[PhoneBoy]

Perhaps but don't know the precise plans.
Recommend engaging with your local office around this requirement.

[Guy_Israeli]

Hi Sigbjorn

Can you elaborate what do you mean by MaaS tunnel for local management?

Thanks, Guy

Check Point product management team

[Sigbjorn]

Hi Guy,

We'd like to establish tunnels from gateways in branch offices to our central management in main datacenter or Azure, so that the gateway itself only requires internet access over tcp/443 to be able to fully communicate with the management. (Like the MaaS tunnel setup does)

Today we need all the 1819x ports and 257 available, and when we have a Core/Edge design where only the Edge cluster has public ip addresses, it causes some challenges.

[Guy_Israeli]

Hi Sigbjorn

We will consider this option for the future, but currently we don't have specific plan to add such capability for the on-prem management.

Thanks, Guy

[waynej]

I've just been looking at using GRE tunnels for this purpose.  Have you (or anyone else for that matter) tried or looked into using a GRE tunnel for management traffic?

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/GRE-Int...

Wayne