Is it required to configure a dedicated Internet Port on Quantum Spark?

[Thomas_Eichelbu]

Hello fellow Check Mates

Is it required to configure a dedicated Internet Port on Quantum Spark?

Maybe a strange question you might think, but think twice.

The story:
we built an Quantum Spark 1900 cluster for a low cost internal firewalling inside a large branch office.
We decided to use a 1900 series because they offer the cheapest 10G ports available for Check Point!
i made a 2x 10G Bond and put all my VLAN´s on top of it, also i set the default route on top on one of this VLANs
Easy Setup, its generally working quite fine.

But, i did not configure a dedicated Internet configuration, because:
+ i cannot choose the existing bond for using it as an Internet Port (my internet is just the default route pointing to the DC firewall)
+ i can create a bond for Internet but i cannot use this port for other VLAN´s.
My goal is to use just 2x10G Bond for all my connectivity. 

Now i see the following errors for some blades:
Some errors, and it says Internet disabled, well its just not configured.

yes no Internet configuration is made, but firewalls works well and does it job.

i only have a bond, with all my VLAN´s on top.

so question to the audience ... what do you think of this?
is this a supported setup?
is it always a MUST to configure a dedicated Internet Link?
are there any tricks to make the appliance believe Internet is configured properly?

best regards

[PhoneBoy]

Locally or centrally managed?

I believe in the past, you couldn't even set a default route if you didn't have an Internet connection configured.
I suspect several other features in SMB also rely on an explicitly configured Internet connection.

[Thomas_Eichelbu]

Hello, 

Yes centrally managed.
the question is, if there is a trick to overcome the need to configure a dedicated internet access configuration ... 
maybe TAC has an answer for me 🙂

[the_rock]

To me, logically, I think it will always show update failed if there is no dedicated Internet link. But, maybe TAC has an answer for it that Im not aware of 🙂

Andy

[PhoneBoy]

Definitely worth checking with TAC.

[Thomas_Eichelbu]

Hello guys, 

yes thank you, your input is highly appreciated, then i will do so ... TAC awaits 🙂