UNABLE TO REACH INTERNAL RESSOURCES FROM OUTSIDE

[YvesK]

Hello, it's impossible to reach internal ressources from external network when they are a firewall,we allow the 8000 port but nothing.Anyone have an idea

[the_rock]

Yes, you need static nat for that. Sort of like, lets give basic example...say you have a friend who wants to RDP into your computer at home. You would need to have an entry in your ISP router that says from whatever source, on port 3389 to whatever your comp IP is internally, same port (aka port forwarding)

Please send an example of what you did.

Andy

[PhoneBoy]

I don't believe this question is about Harmony SASE.
Please state the precise Check Point products involved and the steps you took to try to allow access port 8000?

[YvesK]

it's about of Harmony quantum sase(perimeter 81)

[PhoneBoy]

Screenshots of exactly what you tried to configure might be helpful here.

[YvesK]

i want to configure Harmony sase connector

[PhoneBoy]

As a prerequisite to accessing your hosted resources over Harmony SASE, you need to establish a tunnel between them and our cloud.

The SASE Connector is specifically for infrastructure hosted on specific public cloud providers.
If you're not using one of the aforementioned cloud providers here, you will have to use one of the other options: https://support.perimeter81.com/docs/connect-cloud-resources-1 

Assuming that is the case, if you don't want to terminate a tunnel on a VPN gateway (either with IPsec or OpenVPN), your other option is a Wireguard Connector.
Please review the details here: https://support.perimeter81.com/docs/wireguard-for-linux 

[YvesK]

you're right, when you read the steps to install wireguard for linux, it's mandatory to choose harmony sase connector, that i already did and it's not working

[PhoneBoy]

Please provide more details about what was actually done, the expected results, and the actual results.
Screenshots/CLI output would be exceptionally helpful.