Quantum Force 3920 on smart-1 cloud

[LazarusG]

Is this supported?

The Smart1 documentation says yes;

Smart-1 Cloud Overview

The 3920 getting started guide pushes you to the 'welcome.checkpoint' page where it says Smart-1 isnt available for this appliance;

Check Point Getting Started

I havent seen the FTW on a quantumn box yet - is there an option to connect to cloud instance? (Cant find it in the manual) Or can you paste the token into CLI?

I assume that you would use the dedicated mgmt interface to connect to the internet for the maas tunnel?

Has anyone set this up?

Thanks in advance.

[alisson-lima · Accepted solution]

Hi,

According with Smart-1 Cloud Overview (Supported Gateways and Versions), Quantum Force appliances 39xx is supported but must be running R82.10.

My advise is complete the first time wizard, upgrade the box then after set up internet access (do not need a dedicated mgmt interface), set up it through CLI.

Any problem, please post it.

Alisson Lima

[LazarusG]

Yes it is r82.10

[Expert@Firewall:0]# cpstat os

Product Name:                  SVN Foundation
SVN Foundation Version String: R82.10
SVN Foundation Build Number:   999000089
SVN Foundation Status:         OK
OS Name:                       Gaia
OS Major Version:              5
OS Minor Version:              14
OS Build Number:               -
OS SP Major:                   -
OS SP Minor:                   -
OS Version Level:

Customer has been unable to add to the cloud.

I'll let you know how I get on - but if anyone has already done this I'd appreciate any input.

[alisson-lima]

What you are seeing when you add the maas cli command? Please check internet access, show maas tunnel command, etc.

Is the gateway directed connected to the internet or there is a NAT device after e.g another firewall?

Any errors please post it here.

Alisson Lima

[CaseyB]

Are you running GA1 (Build 271) or GA2 (Build 464) on the device? I would assume it needs to be GA2 to be supported like some other feature sets on the 39xx appliances.

[the_rock]

The output of maas status from expert mode would definitely help us.

[the_rock · Accepted solution]

I just asked MS copilot AI and it seems to confirm what @alisson-lima said as well.

**********************

Yes — a Quantum Force 3920 can be managed by Smart‑1 Cloud, but there’s an important catch that explains the conflicting messages you’re seeing:

✅ Support status (why docs “say yes” but the welcome page “says no”)

In the current Quantum Smart‑1 Cloud Administration Guide (Nov 23, 2025), the Supported Gateways and Versions table explicitly lists:

• Quantum Force: 39xx → requires R82.10 [sc1.checkpoint.com]

So the 3920 (a 39xx model) is supported only when it’s running R82.10 (per the Smart‑1 Cloud guide). [sc1.checkpoint.com]

That likely explains why welcome.checkpoint (or the “getting started” flow) is telling you Smart‑1 Cloud isn’t available: it’s commonly tied to the appliance’s current software image / onboarding flow, and if you’re not on the required version, it won’t offer Smart‑1 Cloud onboarding.

[LazarusG]

Hi Yes its running R82.10 (see previous) So the landing page on the welcome site was confusing. We reset to factory and went through FTW and added in the token from the portal at that point - we can arp the router IP (its a /31) but no internet and public IP of FW is unreachable, so have advised the customer to go back to the ISP. We elected to use eth1 as internet, had considered using mgmt port but not sure if thats appropriate (I dont think its out of band). If we get ISP connectivity and the token isnt accepted we can try adding in Gaia. But waiting on third party for now. There will be no valid maas tunnel with no internet.

[LazarusG · Accepted solution]

Just had confirmation the ISP corrected a Vlan tagging issue and they are now fully connected.

[alisson-lima]

That's nice! I am glad you got this sorted.

Please mark my answers as "Accept as Solution" if I could help you.