Does CheckPoint Spark has a function perform like SonicWall transparent IP mode (Splice L3 Subnet)

[ken2]

Hi...

Does CheckPoint Spark has a function perform like SonicWall transparent IP mode (Splice L3 Subnet). What it does is it will forward the public L3 address to destination server which has the same L3 subnet IP address and that is consider as a DMZ zone. For example, the WAN interface is set to 173.44.16.37/28, the Web server behind this firewall has assigned the IP 173.44.16.38/28 and Email server IP address is 173.44.16.39/28. People from Internet can assess the web server by using the IP 173.44.16.38. When I migrate the SonicWall into CheckPoint Spark, I don't know how to make CheckPoint act like this.

Ken

[PhoneBoy · Accepted solution]

Sounds like Bridge Mode to me, which is definitely supported.
You would have to set up the bridge with the WAN and DMZ interface (or a specific LAN port, if you prefer).

[ken2]

Yes, we did use the bridge mode to set up with the WAN and DMZ interface but we need to change the gateway IP for all servers which is originally point to SonicWall into the ISP gateway IP when using the bridge mode in CheckPoint. Is it because the bridge mode in CheckPoint is a layer 2 instead of layer 3 in SonicWall? 

[PhoneBoy · Accepted solution]

Bridge Mode operates at Layer 2, yes.