Firewall transparency

[joaoleca]

Hi, I have1 Checkpoint 1600 SMB appliance.

For the moment they want to connect it in a way that it doesnt disturb the network since the internet provider's router is the one that distributs DHCP for all the network and it does layer 3.

How can i configure the firewall so it can be put between the router and the client switches without disturbing the network infrastructure (IPs, routes, vlan)?

 

 On the top you have the origial structure on the bottom i how i want it to be.

[PhoneBoy · Accepted solution]

Create a bridge between the LAN and WAN.
Refer to: https://sc1.checkpoint.com/documents/SMB_R81.10.05/AdminGuides/Locally_Managed/EN/Content/Topics/Con...

[joaoleca]

I appreciate the input but the provider wont change the configuration of the router.

The firewall is recieving a private IP from the provider and we have to keep that same IP range for the internal network. 

Is there any way to configure just to analyze the trafic?

[PhoneBoy]

This doesn’t require changing anything on the upstream router.
Once the bridge is configured on the 1600, plug the WAN into your existing router and plug the LAN into your other devices.
You will have to manually configure an IP on the 1600 on the bridge, which should be in the same network as the rest of your LAN.