Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
SecurityNed
Contributor

Allowing access to a Second NGFW Cluster via VPN

Hello!

I would like to ask if there's things that I lack in this current setup. 

I have 2 NGFW clusters under 1 Smart-1 appliance, Cluster 1 and Cluster 2 is only connected through the MGMT port which is under X.X.4.0/24

The question is that I have already added my Office IP of 173.X.X.0/24 on Cluster 2's X.X.4.0/24 Internal Domain, also added it to Cluster 2's VPN domain, but I only see the following logs related to the traffic form 173.X.X.0 to Cluster 2:

Screenshot 2023-04-18 111246.png

I would assume that it would pass through a policy I created for this, but it always goes through the implied rule.

Screenshot 2023-04-18 111449.png

Hoping for your help on this one as I'm getting somewhat confused right now.

Thanks!

  

 

 

 

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

Expected behavior if Global Properties for Accept ICMP Requests is set to First, as shown here:

image.png

If you want this traffic to go through a configured Access rule, then this property will need to be changed.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Wed 01 May 2024 @ 02:00 PM (EDT)

    South US: HTTPS Inspection Best Practices

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Wed 01 May 2024 @ 02:00 PM (EDT)

    South US: HTTPS Inspection Best Practices

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events