SIC issue

[ravinder_gulia]

Hi All

 On  distributed Lab enviornment, having 2 Security gateway, one's IP is 10.1.1.111 and other's IP is 192.168.1.222. SMS having IP 10.1.1.25. Between both gateway internet is there. 1st gateway having internet facing IP 192.168.1.111.

1st Gateway added to SMS without any issue. But while trying to add second Gateway i.e 192.168.1.222, getting SIC issue, not trusted.

I want to manage that 2nd gateway from this SMS.

Is this because it's on another network IP? Is it necessary to be in same network both SG and SMS?

If so, how can we achieve this?

Please suggest.

[Vladimir]

Get your SMS NAT properties configured to have NATed IP in 192.168.1.XX network on LOCAL GATEWAY ONLY and install the policy on local gateway.

Then try to initialize SIC with the second one.

This being said, if your "Internet" 192.168.1.0/24 then it is a common network between two different gateways, it may cause issues for the proper management, as both Gateways will think that it belongs in their topology.

Better to use different networks with routing VM to simulate the Internet.